82
•
The freeGuard 100 drops the packet that triggeredthe
anomaly, sends a reset to the server, and removes the
session from the freeGuard 100 session table. Used for TCP
connections only. If you set this action for non-TCP
connection based attacks, the action behaves as
clear_session
. If the reset_server action is triggered before
the TCP connection is fully established it acts as
clear_session
.
log {disable | enable} Enable or disable logging for the anomaly.
enable
status {disable |
enable}
Enable or disable this anomaly.
enable
threshold
<threshold_integer>
For the anomalies that include the threshold setting, traffic
over the specified threshold triggers the anomaly.
Varies.
Example
This example shows how to change the tcp_land anomaly configuration.
config ips anomaly tcp_land
set action pass
set log enable
set status enable
end
This example shows how to change the icmp_flood anomaly configuration.
config ips anomaly icmp_flood
set action drop
set log enable
set status enable
set threshold 1024
end
This example shows how to display the list of anomalies.
get ips anomaly
This example shows how to display the settings for icmp_flood.
get ips anomaly icmp_flood
This example shows how to display the configuration for the ips anomaly command.
Summary of Contents for freeGuard 100
Page 1: ...freeGuard 100 UTM Firewall CLI USER S MANUAL P N F0025000 Rev 1 1...
Page 3: ......
Page 7: ......
Page 87: ...80 The config ips anomaly command has 1 subcommand config limit...
Page 183: ...176...
