H3C Technologies H3C SecPath F1000-E - Manual (Page 657)

2
2. The aging time for an IDS blocking entry is five minutes. The timer restarts if the firewall receives
an SNMP trap with the same attack information before the timer expires.
3. A blocking entry is effective only to subsequent connections matching this entry. To make entries
apply to the current connections, disable the fast forwarding function of the firewall.
4. Disabling IDS collaboration will remove the generated blocking entries from the firewall.