FireEye Breach

Follow

Gerard

• December 18, 2020 22:25

Is the Firewalla Team posting any adverse actions in response to the huge security breach? Are the listed domains/IPs posted on Cisco Talos going to be added into the "Active Block" rule?

0

• 

  Firewalla

  • December 18, 2020 23:09

  you talking about solarwind? 

  0

  Comment actions Permalink
• 

  Gerard

  • December 18, 2020 23:21

  Yes. I understand the breach is more focused on Solarwinds dll files, but I guess as a peace of mind, are the domains released being added to the Active Block rule? If not, I mean, I’ve already added them as separate rules just as a safety precaution. 

  0

  Comment actions Permalink
• 

  Firewalla

  • December 18, 2020 23:28

  Yes, they are there.  I think Microsoft took over some of the CC domains already, so those domain's likely be 'safe' now https://www.zdnet.com/article/microsoft-and-industry-partners-seize-key-domain-used-in-solarwinds-hack/

   

  0

  Comment actions Permalink

Please sign in to leave a comment.