Arxceo ALLY IP1000, User Manual, Page: 14 / 34

14
Ally IP1000 Notification Message Types
Message Number - Type Message Content
9 Configuration
IP Fragment Policy
Fragmented packets are (‘passed through
without analysis’ or ‘discarded’). If discarded,
fragmented packets (‘are’ or ‘are not’) logged.
10 Configuration
Log Invalid TCP Flags
Packets with invalid TCP flags (‘are’ or ‘are
not’) logged.
11 Configuration
Log Invalid TCP Option
Packets with invalid TCP options (‘are’ or ‘are
not’) logged.
12 Configuration
Prevent Data Leaks
Packet pad bytes (‘are’ or ‘are not’) scrubbed to
prevent data leaks.
13 Configuration
Port Scan Detection
TCP port scan detection is based on the (‘SYN’
or ‘ACK’) packet received during the three-way
handshake of the connection request.
IP address blacklisting due to port scan
detection (‘is’ or ‘is not’) enabled on the inside
adapter and (‘is’ or ‘is not’) enabled on the
outside adapter.
14 Configuration
Inside Port Scans
On the inside adapter, (Inside Scan Number)
connection requests received from the same IP
address in (Inside Scan Timeout Number)
seconds will cause that IP address to be placed
on the inside adapter’s blacklist.
15 Configuration
Outside Port Scans
On the outside adapter, (Outside Scan Number)
connection requests received from the same IP
address in (Outside Scan Timeout Number)
seconds will cause that IP address to be placed
on the outside adapter’s blacklist.
16 Configuration
Blacklist Time Period
An IP address will remain on the blacklist for
(Blacklist Time Period Number) seconds.
Blacklisting events (‘are’ or ‘are not’) logged.
17 Configuration
TCP Policy
TCP packets are (‘passed through without’ or
‘handled according to policy’ or ‘discarded
without’) analysis.
18 Configuration
ARP Policy
ARP packets are (‘passed through without’ or
‘handled according to policy’ or ‘discarded
without’) analysis. If discarded, ARP packets
(‘are’ or ‘are not’) logged.
19 Configuration
ICMP Policy
ICMP packets are (‘passed through without’ or
‘handled according to policy’ or ‘discarded
without’) analysis. If discarded, ICMP packets
(‘are’ or ‘are not’) logged.
20 Configuration
UDP Policy
UDP packets are (‘passed through without’ or
‘handled according to policy’ or ‘discarded
without’) analysis. If discarded, UDP packets
(‘are’ or ‘are not’) logged.
21 Configuration
Other IP Policy
Other IP packets are (‘passed through without’
or ‘handled according to policy’ or ‘discarded
without’) analysis.
22 Configuration
Non-IP Non-ARP Policy
Packets that are not IP and are not ARP are
(‘passed through without’ or ‘handled according
to policy’ or ‘discarded without’) analysis.
23 Configuration
ICMP Echo Request Policy
ICMP Echo packets are (‘passed through
without analysis’ or ‘discarded’).