DPtech FW1000 Series Firewall Products User Configuration Guide
11-252
Chapter 11 IDS Integration
11.1 Introduction
Firewall device added up with IDS cooperation function in order to cooperate with IDS device. IDS device can
detect network traffic if attacks exist and sent SNMIP Trap information to the firewall device with blocking
information, including source IP address and destination IP address of the packets. When IDS cooperation function
enabled, the firewall receives SNMP Trap information and generates blocked entry for the follow-up traffic.
11.2 IDS Integration
11.2.1 Display IDS cooperation log
To enter the display IDS cooperation log interface, you can choose
Service > IDS integration > Display IDS
cooperation log
, as shown in Figure11-1.
Figure11-1
Display IDS cooperation log
Table11-1 describes the configuration items of the display IDS integration log.
Table11-1
Display IDS integration log configuration items
Item
Description
Serial number
Displays the serial number of the IDS integration log.
Source IP
Displays the source IP address of the attack event.
Destination IP
Displays the destination IP address of the attack event.
Whether or not bidirectional
Displays the direction of the attack event.
Valid time (Second)
Displays the valid time of the IDS integration.
Time stamp
Displays the time stamp of the attack event.
Operation
Click
copy icon to copy an entry of the IDS integration log.
Click
delete icon to delete an entry of the IDS integration log.