Alarm; Blaster Alarm - Planet MH-4000 User Manual

Multi-Homing Security Gateway User's Manual

4.14 Alarm

How to apply Alarm Service
The administrator can use Blaster Alarm to track the Virus infected IP; use Traffic Alarm to track the Source
Address, Destination Address, network service and the status of network; and use Event Alarm to track the
attack event from hacker. The administrator also can save Blaster Alarm, Traffic Alarm and Event Alarm for
a pre-determined time and then delete them to keep the newest log.

Blaster Alarm:

The Administrator can enable the device's auto detect functions for blaster worm attacking the local network.
When abnormal conditions occur, MH-2K/4K will send an e-mail alert and/or SNMP trap to notify the
Administrator, and also display warning messages in the Blaster window of Alarm.
Traffic Alarm:
In control policies, the Administrator set the threshold value for Traffic Alarm. The System regularly checks
whether the traffic for a policy exceeds its threshold value and adds a record to the traffic alarm file if it does.
Event Alarm:
When MH-2K/4K detects attacks from hackers, it writes attacking data in the event alarm file and sends an
e-mail alert to the Administrator to take emergency steps.
4.14.1 Blaster Alarm
The Administrator can enable the device's auto detect functions for blaster worm attacking the local network.
When abnormal conditions occur, MH-2K/4K will send an e-mail alert and/or SNMP trap to notify the
Administrator, and also display warning messages in the Blaster window of Alarm.
Entering the Blaster Alarm window
Step 1. Click the Blaster Alarm option below Alarm menu to enter the Blaster Alarm window.
- 213 -