McAfee SG310, Руководство администратора

Страница: 200 / 412

200 McAfee UTM Firewall 4.0.4 Administration Guide
Firewall menu options
Intrusion Detection Systems
1
From the Firewall menu, click Intrusion Detection > UDP tab. The UDP page appears ( Figure 203 ).
Figure 203 IDB UDP tab
2
Select an option for the Network Ports scanned list:
• Basic – Installs a minimal selection of ports to monitor while still providing sufficient coverage to
detect many intruder scans.
• Standard (default) – Extends the Basic coverage by introducing additional monitored ports for early
detection of intruder scans. The Standard setting includes all of the Basic services.
• Strict – Installs a comprehensive selection of ports to monitor and should be sufficient to detect most
scans. The Strict setting includes all services in Standard and Basic in addition to its own unique
settings.
Security Alert: The list of network ports can be freely edited; however, adding network ports used by services
running on the UTM Firewall unit (such as telnet) may compromise the security of the device and your
network. McAfee strongly recommends to use only the predefined lists of network ports (Basic, Standard,
Strict).
3
If you have changed the current configuration, a message informs you custom changes will be lost and
prompts you to confirm your selection. Click Apply to accept.
4
Click Submit.
UDP network services
The predefined Basic, Standard, and Strict settings are listed in Table 17 . An ‘X’ indicates the service is
included in the setting; an em dash (—) indicates the service is not available in a setting.
Table 17 UDP services settings
Service Basic Standard Strict
BackOrifice X X X
bo2k X X X
discard X X X
echo X X X
entrust-sps X X X
epp-700 X X X
filenet-nch X X X