set threat-prevention anti-bot engine dns-domain-generation-algorithm

In the R82.00.X releases, this command is available starting from the R82.00.10 version.

Description

DNS Security protections are part of the Anti-Bot Software Blade.Domain Generation Algorithm is when malware automatically creates hundreds or thousands of domain names to enable infected devices to find a newly registered command-and-control (C2) server without a single, easily blocked domain.

See:

• set threat-prevention anti-bot engine dns-tunneling

• set threat-prevention anti-bot engine dns-attack-detection

• set threat-prevention anti-bot engine dns-over-https

In WebUI, this corresponds to:

1. Click the Threat Prevention view > Threat Prevention section > Blade Control page.

2. Move the Anti-Bot & DNS Security slider to enable.

3. In the Threat Prevention Engine Settings page, select the Domain generation algorithm checkbox.

Syntax

set threat-prevention anti-bot engine dns-domain-generation-algorithm { enabled | disabled }

Example Command

set threat-prevention anti-bot engine dns-domain-generation-algorithm enabled