I am brand new to N.T.A./Orion
The other day I looked at the NTa summary and saw in the top 10 traffic addresses in the past hour and found a site Unknown.servercentral.net
Looked it up and it appears to be a ransomware site.
I blocked that site on our firewall
I now want to generate an ongoing scan for all sites that connect to our network and generate a daily report so I can monitor this.
Ideally I would exclude specific site (Office 365, internet provider etc.) as I review it over time
I have no idea how to do this and am scrambling to learn how.
I am open to an suggestions.