Preventing attacks | Network Intrusion Detection System (NIDS) |
|
|
Preventing attacks
NIDS attack prevention protects the FortiGate unit and the networks connected to it from common TCP, ICMP, UDP, and IP attacks. You can enable NIDS attack prevention to prevent a set of default attacks with default threshold values. You can also enable or disable and set the threshold values for individual attack prevention signatures.
Note: After the FortiGate unit reboots, NIDS attack prevention and synflood prevention are always disabled.
•Enabling NIDS attack prevention
•Enabling NIDS attack prevention signatures
•Setting signature threshold values
Enabling NIDS attack prevention
To enable NIDS attack prevention
1Go to NIDS > Prevention.
2Select the Enable Prevention check box, in the top left corner.
Enabling NIDS attack prevention signatures
The NIDS Prevention module contains signatures that are designed to protect your network against attacks. Some signatures are enabled by default, others must be enabled. For a complete list of NIDS Prevention signatures and descriptions, see the FortiGate NIDS Guide.
To enable attack prevention signatures
1Go to NIDS > Prevention.
2Select the Enable check box beside each signature that you want to enable.
3Select Check All 
to enable all signatures in the NIDS attack prevention signature list.
4Select Uncheck All 
to disable all signatures in the NIDS attack prevention signature list.
5 | Select Reset to Default Values | to enable only the default NIDS attack prevention |
| signatures and return to the default threshold values. | |
274 | Fortinet Inc. |
