DNS v Web Filter v ISDB

[graemeb]

My aim is mainly blocking bad sites (malware, C2, phishing) not controlling certain types.

Web filter and DNS make sense, though perhaps are a tad similar.

ISDB seems to offer some IP blockers. Would ISDB cover my wish by blocking connections pre/post malware to malicous domains (IP behind)?

Thank you

[AEK]

Web filter is for Web navigation, you can control which Web categories you can access or you want to deny.

ISDB IP reputation is not for Web navigation, it is for Tor, Proxy, C&C, bad bots and so.

So they don't have the same goal.

Besides, I think DNS is the old fashion. I think it is not as efficient as Web filter.

[graemeb]

Do you think ISDB would safely do my ask of blocking drive by downloads, phishing, c2...please?

[AEK]

According to Fortinet it should.

I used it and it seems working.

I hope one of the Fortinet team can confirm if the IP reputation DB is updated efficiently.

[graemeb]

I got a bunch of 30 day trials but oddly does not inc. firmware updates nor IPDB.

Buying Forticare alone is not much money.

Thank you

[dingjerry_FTNT]

Hi @graemeb ,

If you have UTM licenses, I would recommend you use Web Filter + Application Control.

[graemeb]

No, I am a glorified home user so think it's a bit ott for me. Just after malicous ip/site blocking.

Thank you

[graemeb]

@dingjerry_FTNTis it possible to buy just dns or web filter alone not under a pack?

[dingjerry_FTNT]

Hi @graemeb ,

Sorry, this is a sales question, I have no idea.

[graemeb]

I will ask a reseller thanks