Symantec 360R Administration Guide - Page 205

IDS Protection tab field descriptions, Port scan detection, This contains the following topics

Page 205 highlights

Field descriptions 205 IDS/IPS field descriptions ■ Port scan detection This section contains the following topics: ■ IDS Protection tab field descriptions ■ Advanced tab field descriptions IDS Protection tab field descriptions Configure basic IDS protection on the IDS Protection tab. Table C-32 IDS Protection tab field descriptions Section IDS Signatures Field Name Protection Settings Block and Warn Block/Don't Warn Protection List WAN WLAN/LAN Attack Name Block and Warn Block/Don't Warn WAN WLAN/LAN Description Select a signature to update. * Asterisk indicates Trojan port detection. Warning and Block is disabled if traffic is explicitly allowed in Inbound Rules. If an attack is detected, blocks the traffic and logs a message. If an attack is detected, blocks the traffic without a logging a message. Enables WAN protection. Enables wireless LAN and LAN protection. Name of the IDS signatures. Displays Y for yes or N for no. Indicates if the Block and Warn protection setting is enabled for this signature. Displays Y for yes or N for no. Indicates if the Block/Don't Warn protection setting is enabled for this signature. Displays Y for yes or N for no. Indicates if the WAN is protected. Displays Y for yes or N for no. Indicates if the wireless LAN and LAN is protected.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218

205
Field descriptions
IDS/IPS field descriptions
Port scan detection
This section contains the following topics:
IDS Protection tab field descriptions
Advanced tab field descriptions
IDS Protection tab field descriptions
Configure basic IDS protection on the IDS Protection tab.
Table C-32
IDS Protection tab field descriptions
Section
Field
Description
IDS Signatures
Name
Select a signature to update.
* Asterisk indicates Trojan port detection.
Warning and Block is disabled if traffic is
explicitly allowed in Inbound Rules.
Protection Settings
Block and Warn
If an attack is detected, blocks the traffic
and logs a message.
Block/Don’t Warn
If an attack is detected, blocks the traffic
without a logging a message.
WAN
Enables WAN protection.
WLAN/LAN
Enables wireless LAN and LAN protection.
Protection List
Attack Name
Name of the IDS signatures.
Block and Warn
Displays Y for yes or N for no. Indicates if
the Block and Warn protection setting is
enabled for this signature.
Block/Don’t Warn
Displays Y for yes or N for no. Indicates if
the Block/Don’t Warn protection setting is
enabled for this signature.
WAN
Displays Y for yes or N for no. Indicates if
the WAN is protected.
WLAN/LAN
Displays Y for yes or N for no. Indicates if
the wireless LAN and LAN is protected.