H3C Technologies H3C SecBlade IPS Cards - Manual (Page 179)

17-22
Figure 17-22 Start traffic learning
# Start threshold adjustment and detection&protection:
After traffic learning, the system automatically starts threshold adjustment and detection&protection by
default (Detection&protection are started when detection rules creation completes).
After above configurations, the device will be capable of defending against DDoS attacks. You can view
DDoS data statistics on the page you enter by selecting DDoS > DDoS Data Statistics.
Configuration Guidelines
When performing DDoS protection configuration, note that:
1) A DDoS policy that has been applied to a segment cannot be deleted.
2) The system default DDoS policy and rules cannot be deleted.
3) If a packet matches multiple DDoS policy applications on a segment, the policy application with the
smallest IP address scope applies to the packet. If two policy applications have the same smallest
IP address scope, the one configured earlier has a higher priority.