Details

FireEye Web MPS supports the use of custom rules for malware analysis. It allows end users to load their own format signature rules which will cause the FireEye appliance to detect customer specific traffic patterns and generate alerts.

Solution

Edit the configuration and modify this line:n

fenet security-content custom rule enable

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system FireEye.

References

• 800-53|SI-4.

Source

• Tenable.com/audits