Radware DefensePro 6.02, Руководство пользователя

Страница: 164 / 339

DefensePro User Guide
Security Configuration
164
Document ID: RDWR-DP-V0602_UG1201
Table 83: Quarantine Action Parameters
Parameter Description
Network Protection Policy The name of the Network Protection Rule.
Action The action that the device takes on outbound Web traffic from the
quarantined internal hosts.
Values:
• Quarantine Warning—The device returns the default message or
the specified, Custom HTML Page.
The default message is as follows:
Access Error: Unauthorized
Your computer is currently under quarantine because the system
identified malicious activity originating from your IP
address. Please contact your system administrator.
Quarantine attack name: <SignatureName> ID: <SignatureID>
IP: <HostIPAddress>
For more information, see Managing the Quarantine Warning
Page, page 165 .
• Redirect—The device redirects outbound Web traffic from the
quarantined internal hosts to the specified Redirection Location.
Default: Quarantine Warning
Redirection Location
(This parameter is available
only when the Action is
Redirect.) The location where the device redirects quarantined internal hosts.
Typically, the location is an HTML page with a message from the
network administrator.
Caution: To prevent an endless loop, the routing to the Redirection
Location must not include the DefensePro device.
Add Metadata Specifies whether to add metadata to URL of the redirected HTTP GET
requests from the quarantined internal hosts. The metadata
comprises the attack name (that is, the signature name), the attack
ID (that is, the signature ID), and the IP address of the quarantined
host.
The format of the metadata is as follows:
<RedirectServer>/?attack=<attackName>&rdwrId=<ID>&ip=<IP>
Example:
MyServer.com/?attack=Worm-Slammer&rdwrId=3204&ip=10.2.3.4
Values: Enable, Disable
Default: Disable