Dell PowerConnect W-Airwave W-Airwave 7.2 Configuration Guide - Page 81

Profiles > IDS > Signature Matching > Signature, Profiles > IDS > Denial of Service

Get Dell PowerConnect W-Airwave PDF manuals and user guides View all Dell PowerConnect W-Airwave manuals
Add to My Manuals
Save this manual to your list of manuals

Page 81 highlights

Table 28 Profiles > IDS > Signature Matching Profile Settings (Continued) Field Default Description Name Blank Enter the name of the profile. Signature Profiles Select Signature Profiles Select from signature options as follows:  AirJack  ASLEAP  Deauth-Broadcast  default  Disassoc-Broadcast  Netstumbler Generic  Netstrumbler Version 3.3.0x  Null-Probe-Response  Wellenreiter 3. Select Add or Save. The added or edited Signature Matching profile appears on the IDS > Signature Matching profiles page. Profiles > IDS > Signature Matching > Signature Perform these steps to create signatures for use with Signature Matching profiles. 1. Select Profiles > IDS > Signature Matching > Signature in the Dell PowerConnect W Navigation pane. 2. Select the Add button to create a new Signature, or click the pencil icon next to an existing profile to edit. The Details page appears. Complete the settings as described in Table 29: Table 29 Profiles > IDS > Signature Creation Settings Field Default Description General Settings Folder Top Name IDS Signatures Add Blank Set the folder with which the profile is associated. The drop-down menu displays all folders available for association with the profile. Enter the name of the signature. Select this button to add a new IDS signature. Complete the settings as follows:  Parameter, which can be one of the following:  bssid  dst-mac  frame-type  payload  seq-num  src-mac  BSSID Select Add when these signature settings are defined. 3. Select Add or Save on the Signature page. The added or edited Signature appears on the IDS > Signature Matching > Signatures page. Profiles > IDS > Denial of Service This profile type defines traffic anomaly settings that detect and process denial-of-service attacks. This profile type defines the parameters that are monitored and acted upon when detecting and blacklisting an offending Dell PowerConnect W AirWave 7.2 | Configuration Guide Dell PowerConnect W Configuration Reference | 81

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
Dell PowerConnect W AirWave 7.2
| Configuration Guide
Dell PowerConnect W Configuration Reference
|
81
3.
Select
Add
or
Save
.
The added or edited
Signature Matching
profile appears on the
IDS > Signature
Matching
profiles page.
Profiles > IDS > Signature Matching > Signature
Perform these steps to create signatures for use with
Signature Matching
profiles.
1.
Select
Profiles > IDS > Signature Matching > Signature
in the
Dell PowerConnect W Navigation
pane.
2.
Select the
Add
button to create a new
Signature
, or click the
pencil
icon next to an existing profile to edit.
The
Details
page appears. Complete the settings as described in
Table 29
:
3.
Select
Add
or
Save
on the
Signature
page. The added or edited
Signature
appears on the
IDS > Signature
Matching > Signatures
page.
Profiles > IDS > Denial of Service
This profile type defines traffic anomaly settings that detect and process denial-of-service attacks. This profile
type defines the parameters that are monitored and acted upon when detecting and blacklisting an offending
Name
Blank
Enter the name of the profile.
Signature Profiles
Select Signature
Profiles
Select from signature options as follows:
AirJack
ASLEAP
Deauth-Broadcast
default
Disassoc-Broadcast
Netstumbler Generic
Netstrumbler Version 3.3.0x
Null-Probe-Response
Wellenreiter
Table 29
Profiles > IDS > Signature Creation Settings
Field
Default
Description
General Settings
Folder
Top
Set the folder with which the profile is associated. The drop-down menu displays all
folders available for association with the profile.
Name
Blank
Enter the name of the signature.
IDS Signatures
Add
Select this button to add a new IDS signature. Complete the settings as follows:
Parameter, which can be one of the following:
bssid
dst-mac
frame-type
payload
seq-num
src-mac
BSSID
Select
Add
when these signature settings are defined.
Table 28
Profiles > IDS > Signature Matching Profile Settings (Continued)
Field
Default
Description