306
01-28006-0014-20041105
Fortinet Inc.
Anomaly
IPS
To configure the settings of an anomaly
1
Go to
IPS > Anomaly
.
2
Select the Edit icon for the signature you want to configure.
3
Select the Enable box to enable the anomaly or clear the Enable box to disable the
anomaly.
4
Select the Logging box to enable logging for this anomaly or clear the Logging box to
disable logging for this anomaly.
5
Select an action for the FortiWiFi unit to take when traffic triggers this anomaly.
6
Enter a new threshold value if required.
7
Select OK.
To restore the default settings of an anomaly
1
Go to
IPS > Anomaly
.
2
Select the Reset icon for the anomaly you want to restore to defaults.
The Reset icon is displayed only if the settings for the anomaly have been changed
from defaults.
3
Select OK.
Reset
The FortiWiFi unit drops the packet that triggered the anomaly, sends a
reset to both the client and the server, and removes the session from
the FortiWiFi session table. Used for TCP connections only. If you set
this action for non-TCP connection based attacks, the action will behave
as Clear Session. If the Reset action is triggered before the TCP
connection is fully established it acts as Clear Session.
Reset
Client
The FortiWiFi unit drops the packet that triggered the anomaly, sends a
reset to the client, and removes the session from the FortiWiFi session
table. Used for TCP connections only. If you set this action for non-TCP
connection based attacks, the action will behave as Clear Session. If the
Reset Client action is triggered before the TCP connection is fully
established it acts as Clear Session.
Reset
Server
The FortiWiFi unit drops the packet that triggered the anomaly, sends a
reset to the server, and removes the session from the FortiWiFi session
table. Used for TCP connections only. If you set this action for non-TCP
connection based attacks, the action will behave as Clear Session. If the
Reset Server action is triggered before the TCP connection is fully
established it acts as Clear Session.
Drop
Session
The FortiWiFi unit drops the packet that triggered the anomaly and
drops any other packets in the same session.
Clear
Session
The FortiWiFi unit drops the packet that triggered the anomaly, removes
the session from the FortiWiFi session table, and does not send a reset.
Pass
Session
The FortiWiFi unit lets the packet that triggered the anomaly and all
other packets in the session pass through the firewall.
threshold
Traffic over the specified threshold triggers the anomaly.
Summary of Contents for Fortiwifi fortiwifi-60
Page 42: ...42 01 28006 0014 20041105 Fortinet Inc Changing the FortiWiFi firmware System status...
Page 78: ...78 01 28006 0014 20041105 Fortinet Inc Wireless MAC Filter System wireless...
Page 86: ...86 01 28006 0014 20041105 Fortinet Inc Dynamic IP System DHCP...
Page 120: ...120 01 28006 0014 20041105 Fortinet Inc Access profiles System administration...
Page 238: ...238 01 28006 0014 20041105 Fortinet Inc Protection profile Firewall...
Page 250: ...250 01 28006 0014 20041105 Fortinet Inc CLI configuration Users and authentication...
Page 326: ...326 01 28006 0014 20041105 Fortinet Inc CLI configuration Antivirus...
Page 372: ...372 01 28006 0014 20041105 Fortinet Inc CLI configuration Log Report...
Page 386: ...386 01 28006 0014 20041105 Fortinet Inc Glossary...