DoS sensors
Configuring DoS sensors
FortiGate IPS User Guide Version 3.0 MR7
01-30007-0080-20080916
47
Figure 13: Edit DoS Sensor
DoS sensor attributes:
Anomaly configuration:
Name
Enter or change the DoS sensor name.
Comments
Enter or change an optional description of the DoS sensor. This description
will appear in the DoS sensor list.
Name
The name of the anomaly.
Enable
Select the check box to enable the DoS sensor to detect when the
specified anomaly occurs. Selecting the check box in the header row will
enable sensing of all anomalies.
Logging
Select the check box to enable the DoS sensor to log when the anomaly
occurs. Selecting the check box in the header row will enable logging for all
anomalies. Anomalies that are not enabled are not logged.
Action
Select Pass to allow anomalous traffic to pass when the FortiGate unit
detects it, or set Block to prevent the traffic from passing.
Threshold
Displays the number of sessions/packets that must show the anomalous
behavior before the FortiGate unit triggers the anomaly action (pass or
block). If required, change the number. For more information about how
these settings affect specific anomalies, see
Table 10 on page 48
.
