Views:
Each reputation entry has an associated reputation score that represents potential risk level. Reputation scores range from 1 to 100, with a score of 100 representing a definite threat. Reputation scores are categorized into the following five ranges:
  • 80-100: These entries are blocked by default when you use ThreatDV and have created a reputation filter for your profile.
  • 60-79: These entries are known to be somewhat malicious, but may not have enough corroborating information.
  • 40-59: These entries are likely to be malicious, but not enough information is available to assign them a score of 60.
  • 23-39: These entries are mostly non-malicious in nature, but may have generated undesirable traffic.
  • 0-19: These entries generally do not represent any threat, but may have generated slightly suspicious traffic.
You can use reputation scores to assess and reassign risk for reputation filters that are active on a device. If suspicious activity continues, you can assign a higher score to the reputation entry. To avoid inadvertently interrupting business-critical communications, make sure that you set critical hosts, such as your external partners, to be permitted.