Secure Computing SG570 Instrukcja Użytkownika Pobierz pdf (Strona 170)

100

101

These attacks can potentially be detected and prevented using an intrusion detection

system.

Basic Intrusion Detection and Blocking (IDB)

Click the IDB tab to configure basic Intrusion Detection and Blocking (IDB).

IDB operates by offering a number of services to the outside world that are monitored for

connection attempts. Remote machines attempting to connect to these services

generate a system log entry providing details of the access attempt, and the access

attempt is denied.

Because network scans often occur before an attempt to compromise a host, you can

also deny all access from hosts that have attempted to scan monitored ports. To enable

this facility, select one or both of the block options and these hosts are automatically

blocked once detected.

IDB Configuration

Detect TCP probes monitors dummy TCP services. Detect UDP probes monitors

dummy UDP services. Block sites probing TCP ports and Block sites probing UDP

ports blocks hosts attempting to connect to these services from all access to the

SnapGear unit. Connection attempts are logged under Scanning Hosts.

164

Firewall

1 2 ... 165 166 167 168 169 170 171 172 173 174 175 ... 340 341

Komentarze do niniejszej Instrukcji

Brak uwag

Secure Computing SG570 Instrukcja Użytkownika Strona 170

Komentarze do niniejszej Instrukcji