Advanced Behavioral Alarm - What triggers it?

Comments

4 comments

  • Avatar
    Firewalla CM

    Advanced Behavioral Alarm will generate alarms if there's ever any unusual behavior on your devices. For example, if a device ever accesses sites other than its own manufacturer's sites, or if it uploads a lot more data than usual in a single day. The main benefit of this is that it can leverage 30-180 days' worth of flow data (vs just 24 hours without MSP), so it can better identify those anomalies.

    Please also note that MSP Active Protect is still in the beta stage, so the algorithms we use to generate alarms are much less aggressive. 

    https://help.firewalla.com/hc/en-us/articles/37198930464019-Firewalla-MSP-MSP-Active-Protect

    0
    Comment actions Permalink
  • Avatar
    Doyle Jack

    Firewalla CM - So this is different then the abnormal upload alarms I typically get?

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    This one is triggered by the MSP, which has a better history than what's triggered via the Firewalla Box. 

    0
    Comment actions Permalink
  • Avatar
    Doyle Jack

    I look forward to seeing it work. :)

     

    0
    Comment actions Permalink

Please sign in to leave a comment.