locked
ATA without NETBIOS RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi all

    Is there any chance to run Advanced Threat Analytics without using NETBIOS ?

    We disabled NETBIOS over TCP/IP on all DC`s in our company cause of security reasons but the gateway still use it.

    That`s not wanted from our security department.

    But we like to use ATA.

    Greets

    Torsten

    Thursday, July 19, 2018 9:08 AM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    Are you asking if ATA can work fine without it or if it's possible to block ATA from even trying to do that?

    ATA can work OK if it still has NTLMRPC port answering, not having netbios might increase false positives a bit.

    There is no option to tell ATA not to try using netbios at all.

    Thursday, July 19, 2018 9:39 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thx for answering.

    I hoped that it is possible to block ATA using NETBIOS.

    Friday, July 20, 2018 6:53 AM