
and put it into the Selected list.
3.
Click OK
Configure an HTTP threshold of 10 connections/second:
1.
Go to Traffic Management > Threshold Rules > Add > Threshold Rule
2.
For the Threshold Rule enter:
•
Name: HTTP-Threshold
•
Service: http
3.
For Address Filter enter:
•
Source Interface: The firewall's management interface
•
Destination Interface: any
•
Source Network: 192.168.2.0/24 (or the object name)
•
Destination Network: all-nets
4.
Click OK
Specify the threshold, the threshold type and the action to take if exceeded:
1.
Go to Add > Threshold Action
2.
Configure the Theshold Action as follows:
•
Action: Protect
•
Group By: Host-based
•
Threshold: 10
•
Set the units for the threshold value to be Connections/Second
•
Tick the Use ZoneDefense checkbox
•
Click OK
12.3.4. ZoneDefense with Anti-Virus Scanning
ZoneDefense can be used in conjuction with the NetDefendOS Anti-Virus scanning feature.
NetDefendOS can first identify a virus source through antivirus scanning and then block the source
by communicating with switches configured to work with ZoneDefense. This feature is activated
through the following ALGs:
•
HTTP - ZoneDefense can block an HTTP server that is a virus source.
•
FTP - ZoneDefense can block a local FTP client that is uploading viruses.
•
SMTP - ZoneDefense can block a local SMTP client that is sending viruses with emails.
This feature is described further in Section 6.4, “Anti-Virus Scanning” and in the sections covering
the individual ALGs.
12.3.5. Limitations
There are some differences in ZoneDefense operation depending on switch model. The first
difference is the latency between the triggering of a blocking rule to the moment when switch(es)
actually starts blocking out the traffic matched by the rule. All switch models require a short period
of latency time to implement blocking once the rule is triggered. Some models can activate blocking
12.3.4. ZoneDefense with Anti-Virus
Scanning
Chapter 12. ZoneDefense
424
Summary of Contents for 800 - DFL 800 - Security Appliance
Page 24: ...1 3 NetDefendOS State Engine Packet Flow Chapter 1 NetDefendOS Overview 24 ...
Page 69: ...2 6 4 Restore to Factory Defaults Chapter 2 Management and Maintenance 69 ...
Page 121: ...3 9 DNS Chapter 3 Fundamentals 121 ...
Page 181: ...4 7 5 Advanced Settings for Transparent Mode Chapter 4 Routing 181 ...
Page 192: ...5 5 IP Pools Chapter 5 DHCP Services 192 ...
Page 282: ...6 7 Blacklisting Hosts and Networks Chapter 6 Security Mechanisms 282 ...
Page 300: ...mechanism 7 3 7 SAT and FwdFast Rules Chapter 7 Address Translation 300 ...
Page 301: ...7 3 7 SAT and FwdFast Rules Chapter 7 Address Translation 301 ...
Page 318: ...8 3 Customizing HTML Pages Chapter 8 User Authentication 318 ...
Page 322: ...ALG 9 1 5 The TLS Alternative for VPN Chapter 9 VPN 322 ...
Page 377: ...Management Interface Failure with VPN Chapter 9 VPN 377 ...
Page 408: ...10 4 6 SLB_SAT Rules Chapter 10 Traffic Management 408 ...
Page 419: ...11 5 HA Advanced Settings Chapter 11 High Availability 419 ...
Page 426: ...12 3 5 Limitations Chapter 12 ZoneDefense 426 ...
Page 449: ...13 9 Miscellaneous Settings Chapter 13 Advanced Settings 449 ...