beautypg.com

Fortinet Network Device IPS User Manual

Page 47

background image

DoS sensors

Configuring DoS sensors

FortiGate IPS User Guide Version 3.0 MR7
01-30007-0080-20080916

47

Figure 13: Edit DoS Sensor

DoS sensor attributes:

Anomaly configuration:

Name

Enter or change the DoS sensor name.

Comments

Enter or change an optional description of the DoS sensor. This description

will appear in the DoS sensor list.

Name

The name of the anomaly.

Enable

Select the check box to enable the DoS sensor to detect when the

specified anomaly occurs. Selecting the check box in the header row will

enable sensing of all anomalies.

Logging

Select the check box to enable the DoS sensor to log when the anomaly

occurs. Selecting the check box in the header row will enable logging for all

anomalies. Anomalies that are not enabled are not logged.

Action

Select Pass to allow anomalous traffic to pass when the FortiGate unit

detects it, or set Block to prevent the traffic from passing.

Threshold

Displays the number of sessions/packets that must show the anomalous

behavior before the FortiGate unit triggers the anomaly action (pass or

block). If required, change the number. For more information about how

these settings affect specific anomalies, see

Table 10 on page 48

.