FortiOS 5.4 Online Help Link FortiOS 5.2 Online Help Link FortiOS 5.0 Online Help Link FortiOS 4.3 Online Help Link

Home > Online Help

> Chapter 21 - Security Profiles > AntiVirus > Antivirus concepts > Botnet protection

Botnet protection

Protection from having your system being controlled by a botnet is achieved by detecting and blocking connection attempts to known botnets. This feature also includes connections to known phishing sites. The FortiGuard IP Reputation Database (IRDB) continually updated with addresses of known command and control (C&C) sites that botnet clients attempt to connect to, as well as a database of phishing URLs. Access to this database is available to users through FortiCare support contracts purchased or renewed before October 1, 2016. After that date, users will have to subscribe to the IRDB either through FortiGuard Mobility Security Service (FMSS) or the FortiGuard Enterprise Bundle.

To enable Botnet and phishing protection in an antivirus profile check the checkbox next to Detect Connection to Botnet C&C Servers.

The Botnet protection feature is available for both proxy and flow-based antivirus profiles.