Using SmartDefense
In this field… Do this…
In a period of
[seconds]
SmartDefense detects ports scans by measuring the number of ports
accessed over a period of time. The number of ports accessed must exceed
the
Number of ports accessed
value, within the number of seconds specified by
the
In a period of [seconds]
value, in order for SmartDefense to consider the
activity a scan.
Type the maximum number of seconds that can elapse, during which the
Number of ports accessed
threshold is exceeded, in order for SmartDefense to
detect the activity as a port scan.
For example, if this value is 20, and the
Number of ports accessed
threshold is
exceeded for 15 seconds, SmartDefens will detect the activity as a port
ot
detect the activity as a port scan.
e
scan. If the threshold is exceeded for 30 seconds, SmartDefense will n
The default value is 20 seconds.
Track
Specify whether to issue logs for scans, by selecting one of the following:
•
None.
Do not issue logs. This is the default.
Detect scans
from Internet only
Specify whether to detect only scans originating from the Internet, by
selecting one of the following:
•
False.
Do not detect only scans from the Internet. This is the
default.
•
True.
Detect only scans from the Internet.
•
Log.
Issue logs. This is the default.
244
D-Link NetDefend firewall User Guide
