PAMSPAN 3000 User Manual
-40-
been removed. There are two hyperlinks on the page:
a. To add a new trigger, click on
New Trigger
.
b. To display the Security Interface Configuration page, click on
Return to Interface List
.
Configuring Intrusion Detection Settings
Intrusion Detection settings allow you to protect your network from intrusions such as
denial of service (DOS) attacks, port scanning and web spoofing. This section assumes
that you have followed the instructions in
Enabling Security
Section
and
Enabling Firewall
and/or Intrusion Detection
Section
.
To configure Intrusion Detection settings:
1.
Go to the
Policies, Triggers and Intrusion Detection
section of the
Security Interface
Configuration
page. Click on
Configure Intrusion Detection.
The
Firewall Configure
Intrusion Detection
page is displayed:
The values displayed in EmWeb Firewall Configure Intrusion Detection page are the
default values.
2 .
Configure Intrusion Detection as follows:
a.
Use Blacklist; select true or false depending on whether you want external hosts to be
blacklisted if the Firewall detects an intrusion from that host. Click on the Clear
Blacklist button at the bottom of the page to clear blacklisting of an external host.
The Security Interface Configuration page is displayed.
b.
Use Victim Protection; select true or false depending on whether you want to protect a
victim from an attempted web spoofing attack.
c.
DOS Attack Block Duration; type the length of time (in seconds) that the Firewall
blocks suspicious hosts for once a DOS attack attempt has been detected.
