locked
ATA without NETBIOS RRS feed

  • Question

  • Hi all

    Is there any chance to run Advanced Threat Analytics without using NETBIOS ?

    We disabled NETBIOS over TCP/IP on all DC`s in our company cause of security reasons but the gateway still use it.

    That`s not wanted from our security department.

    But we like to use ATA.

    Greets

    Torsten

    Thursday, July 19, 2018 9:08 AM

All replies

  • Are you asking if ATA can work fine without it or if it's possible to block ATA from even trying to do that?

    ATA can work OK if it still has NTLMRPC port answering, not having netbios might increase false positives a bit.

    There is no option to tell ATA not to try using netbios at all.

    Thursday, July 19, 2018 9:39 AM
  • Thx for answering.

    I hoped that it is possible to block ATA using NETBIOS.

    Friday, July 20, 2018 6:53 AM