Coyote Point Systems Equalizer GX Series, Administration Manual

Page: 247 / 866

IP Reputation
Note - IP Reputation is not supported on Equalizer E250GX, E350GX, E450GX, or E650GX.
Security threats arise from a variety of sources on the internet: botnets, spammers, phishers,
etc., are all common threats that you want to keep off your network. Manually identifying suspect
client IP addresses from which these threats originate is a complex task that many organizations
do not have the resources to tackle. The IP Reputation feature provides you with a vigorously
maintained database of IP addresses of compromised and malicious clients – as well as the
infrastructure necessary to refuse those clients access to your network. It uses accurate, early,
and frequently updated identification so you can block these attackers before they target your
servers.
Data about dangerous clients is derived from many sources around the globe. This data is
compiled into Fortinet’s IP Reputation Database (IRDB), which consists of the IP addresses of
suspect clients. Clients are identified and tagged with poor reputations and included in the IRDB if
they have been participating in attacks, willingly or otherwise. Configuring IP Reputation includes
the following tasks:
l
Enabling IP Reputation Blocking.
l
Downloading the IRDB from Fortinet.
l
Optionally selecting specific categories of IP addresses to block.
l
Optionally adding IP addresses to a whitelist and blacklist.
The above tasks are shown graphically in the figure below:
Statistics are also generated that show all blocked IP addresses and the number of packets
blocked for each IP address.
Copyright © 2014 Coyote Point Systems, A Subsidiary of Fortinet, Inc.
All Rights Reserved. 247
Equalizer Administration Guide