Block a specific spyware

[TSPI]

Hi All,

I just want to ask how can we do a spyware blocking. We want to block mariposa spyware but i tried to configure the policy but it does not deny it.

Thanks.

[HULK]

Hello TSPI,

Are you talking about threat ID-12652 "Mariposa Command and Control" as mentioned below..?

If so,then it should drop all packet for that session. The default action of this spyware is set to "drop-all-packet". I would request you confirm, whether traffic is passing through the correct policy, where you have configured the anti-spyware profile.

Thanks