Detecting attacks | Network Intrusion Detection System (NIDS) |
|
|
Selecting the interfaces to monitor
To select the interfaces to monitor for attacks
1Go to NIDS > Detection > General.
2Select the interfaces to monitor for network attacks. You can select one or more interfaces.
3Select Apply.
Disabling monitoring interfaces
To disable monitoring interfaces for attacks
1Go to NIDS > Detection > General.
2Clear the check box for all the interfaces that you do not want monitored.
3Select Apply.
Configuring checksum verification
Checksum verification tests the files that pass through the FortiGate unit to make sure that they have not been changed in transit. The NIDS can run checksum verification on IP, TCP, UDP, and ICMP traffic. For maximum detection, you can turn on checksum verification for all types of traffic. However, if the FortiGate unit does not need to run checksum verification, you can turn it off for some or all types of traffic to improve system performance. For example, you might not need to run checksum verification if the FortiGate unit is installed behind a router that also does checksum verification.
To configure checksum verification
1Go to NIDS > Detection > General.
2Select the type of traffic that you want to run Checksum Verifications on.
3Select Apply.
Figure 31: Example NIDS detection configuration
216 | Fortinet Inc. |
