Table of Contents
Advertisement
OPERATION MODE
In In-Line mode, the DFL-M510 works as a transparent gateway in your
network. All traffic is inspected as it passes through the DFL-M510. The
DFL-M510 responds to illegal activities based on policy rules. When
attacks are detected, the DFL-M510 can take the following action:
In-Line
• Drop the Packet
• Reset the Connection
• Log the Event
• Save the Packet Message Content
In Bypass mode, the DFL-M510 works like a bridge with all rules and
actions disabled. This mode is designed to help network administrators to
Bypass
debug and trace network abnormalities. When bypass mode is selected,
the DFL-M510 will not detect nor take action to security events in the
network.
Monitor mode allows you to analyze network activities and make
early-stage diagnosis before deployment. The DFL-M510 will detect all
events by inspecting all packets. In this mode, the DFL-M510 will log all
Monitor
events, but will not take any countermeasure (reset, drop actions). It is
suggested to monitor net-work traffic in this mode before setting In-Line
mode, in order to fine tune your security policy and network performance.
The DFL-M510 only protects and monitors your net-work when set to
In-Line mode. The other modes offer limited monitoring and are used
for integrating the DFL-M510 smoothly with your network.
52
Advertisement
Table of Contents
