Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Create Metadata Streaming Profile to Detect Command-and-Control (C2) Communications

  1. In the Metadata Streaming Profiles section, click +.
    The Create Metadata Streaming Profile page is displayed.
  2. Enter a unique profile name within 63 alphanumeric characters. You can use special characters such as _ and -.
  3. In the HTTP section, enable the Encrypted c2 toggle button.
  4. Select how you want to log a request:

    • Log detections—Log the request only if a threat is detected.

    • Log everything—Log all requests received by the device.

  5. Enable the Fallback options log toggle button to log the request if no threat is detected.
  6. Click OK.
    The metadata streaming profile is created and displayed on the Metadata Streaming Policy page.