IPS Digital Vaccine (DV) Filters
STEP 3 Locate the Port Scan/Host Sweep filters:
STEP A Click Search Filters. Then, on the Filter Search page, specify the search criteria:
STEP B
STEP C
STEP D
STEP E
In the Categories selection list, click Reconnaissance.
In the Severity selection list, click Low.
Click Search.
In the Filters List with the search results, click the >> page control button to go to the last page of the results.
STEP 4
STEP 5
STEP 6
To add the Port Scan/Host Sweep filters to the Security Profile for editing, do one of the fol- lowing:
•To add an individual filter, click the Add icon in the Functions column for that filter.
•To add multiple filters, check each filter. Then, click Add Selected Filters.
On the Edit Security Profile page in the Filters section, click the Filter Name to edit the set- tings.
In the Action/State section, select Use Category Settings or Override. If you select Override to use a different action set for the filter, do the following:
STEP A Select the Override radio button in the Parameters section.
STEP B
STEP C
Check the Enabled check box.
Choose an Action from the
STEP 7 Optionally, you can set adaptive filter settings for flow control. In the Adaptive Filter Configuration State section, select one of the following:
•Use adaptive configuration settings — Applies the global adaptive filter settings
•Do not apply adaptive configuration settings to this filter — The filter will not be monitored by the Adaptive Filter mechanism
STEP 8 In the Scan/Sweep Parameters section, do the following:
STEP A Enter the number of seconds for the Timeout.
STEP B Enter the number of hits allowed for the Threshold.
STEP 9 Optionally, you can add exceptions to the filter so that the filter will not be used to monitor traffic from specified IP addresses. In the Exceptions section, do the following:
STEP A
STEP B
STEP C
Enter the Source Address.
Enter the Destination Address.
Click add to the table below.
STEP 10 Click Save.
X Family LSM User’s Guide V 2.5.1 | 37 |
|
|