Botnet detection identifies local proxy as C&C server

Products

• Web Gateway

Issue/Introduction

The Botnet detection component of Symantec Web Gateway (SWG) identifies a local proxy as a Botnet Command & Control server. 

None.

Cause

Adding a Proxy Server to the Servers tab only prevents SWG from listing a Proxy Server as an Active bot.
 

Resolution

 

 

 

 

 

 

 

Add the IP address of the proxy server to the whitelist of SWG appliance.