1 Reply Latest reply on Aug 19, 2014 1:56 PM by jolson

    Http Response

    geordie633

      As http response is defaulted to disable I take it any traffic of signatures heading to a command and control server wouldn't be picked up by the sensors unless it was enabled?  If so why would default be disabled?

        • 1. Re: Http Response

          The option 'HTTP Response Scanning' is disabled by default because scanning response traffic requires extra system resources. To minimize the impact on performance, we recommend enabling this option only where necessary.

           

          Best,

           

          Jesse Olson

          Technical Support Engineer

          McAfee. Part of Intel Security.