Nokia IP60 - Security Appliance, Руководство пользователя

Страница: 296 / 494

SmartDefense Categories
296 Nokia IP60 Security Appliance User Guide
In this field… Do this…
In a period of
[seconds]
SmartDefense detects ports scans by measuring the number of ports
accessed over a period of time. The number of ports accessed must exceed
the
Number of ports accessed
value, within the number of seconds specified by
the
In a period of [seconds]
value, in order for SmartDefense to consider the
activity a scan.
Type the maximum number of seconds that can elapse, during which the
Number of ports accessed
threshold is exceeded, in order for SmartDefense to
detect the activity as a port scan.
For example, if this value is 20, and the
Number of ports accessed
threshold is
exceeded for 15 seconds, SmartDefense will detect the activity as a port
scan. If the threshold is exceeded for 30 seconds, SmartDefense will not
detect the activity as a port scan.
The default value is 20 seconds.
Track Specify whether to issue logs for scans, by selecting one of the following:
Log.
Issue logs. This is the default.
None.
Do not issue logs. This is the default.
Detect scans
from Internet only
Specify whether to detect only scans originating from the Internet, by
selecting one of the following:
False.
Do not detect only scans from the Internet. This is the
default.
True.
Detect only scans from the Internet.
FTP
This category allows you to configure various protections related to the FTP protocol. It includes the
following:
Block Known Ports on page 297
Block Port Overflow on page 299
Blocked FTP Commands on page 299
FTP Bounce on page 297