Chapter 4 Zone Configuration
Zone Traffic Learning
Where
Note that the Guard enables the use of an asterisk (*) as a wildcard denoting either of the following options:
–All of the Guard’s zones. Issuing learning
–A wildcard denoting zone names (i.e. OBL*).
2.Choose ENTER.
Note Cisco recommends letting the Learning Phase 1 - Policy Construction continue for at least two hours prior to proceeding to the next phase.
Note Policy Construction cannot be performed for zones based on the
Terminating Learning Phase 1 –Policy Construction
After a sufficient period of time (see the above note) the user ends the Policy
Construction phase. The user may accept the Detector’s suggested policies.
The user may decide to abort the first phase of the Learning process. In this case, the Detector stops the process and erases all its learned data. As a result, the Detector falls back into its default settings (in the case of a new zone) or to the zone traffic configurations it had prior to the initiation of the learning process.
The user may decide to view the learning process outcomes prior to making a decision. See the “Zone and Learning Phase Snapshot” section in Chapter 7, “Policy Procedures” for further details.
| Cisco Traffic Anomaly Detector User Guide |
|
