Network Attack Protection

Network Attack Protection is an extension of the Firewall that improves the detection of exploits for known vulnerabilities at the network level. By implementing detections for common exploits in widely used protocols such as SMB, RPC and RDP, it constitutes another important layer of protection against spreading malware, network-conducted attacks and exploitations of vulnerabilities for which a patch has not yet been released or deployed.

note

Logging

The message of security vulnerability exploitation is logged even if the particular vulnerability is already patched since the exploitation attempt is detected and blocked on the network level before actual exploitation could happen.