your example, the event type is Web and the severity is High.
means the user/source IP keeps trying to connect these high risk web sites.
Why does the user or PC with source IP try to access these high risk web sites?
Is it already controlled by Botnet C&C?
ZyWALL, go to Content Filter > Profile > Category Service and check the action for Security Threat Web Pages. If
the action is not "Block", set it as "Block".
future phase of SecuReporter, we will add one more column in the table with the
"Action" to let administrator know if the threat if blocked or
passed. If the action is "Block", you don't have to be worried about