Dell PowerConnect W-IAP92 Dell Instant 6.1.3.1-3.0.0.0 User Guide - Page 195

Session Firewall Based Blacklisting In session firewall based blacklisting, an ACL rule is used to enable the option for automation blacklisting. when the ACL rule is hit, it would send out blacklist information and the client would be blacklisted. To set the blacklist duration, perform the following steps: 1. Select the PEF link and then select Blacklisting tab.  Auth failure blacklist time- Enter the duration since the blacklisting has been triggered when the authentication failure threshold is exceeded.  PEF rule blacklisted time- Enter the duration since the blacklisting has been triggered when a blacklisting rule has been triggered. NOTE: In the Networks tab, click the New link and go to Basic Info > VLAN > Security > Access page to enable Auth failure blacklist Blacklisting. Set a value between 1 to 10 in the max authentication failures of the SSID. To enable session firewall based blacklisting first enable the Blacklisting option of the corresponding ACL rule. Figure 158 Dynamic Blacklisting PEF Settings Firewall ALG Configuration Instant firewall now supports the ALG (Application Layer Gateway) functions such as SIP, Vocera, Alcatel NOE, and Cisco Skinny protocols. To enable or disable the protocols for ALG in Dell Instant perform the following steps: 1. Select PEF from the top right of the Instant UI. 2. Select PEF Settings tab. 3. Select Enabled from the corresponding drop-down list to enable SIP, VOCERA, Alcatel NOE, and Cisco skinny protocols. Figure 159 Enabling ALG Protocols Dell PowerConnect W-Series Instant Access Point 6.1.3.1-3.0.0.0 | User Guide Policy Enforcement Firewall | 195