Allied Telesis AR Series Technical Manual page 15

Feature Overview
Figure 1: IP Reputation
AlliedWare Plus IP Reputation delivers accurate and robust scoring, ensuring that malicious IP
addresses are identified and strong local policies can be carried out with confidence.
AlliedWare Plus IP Reputation provides the following key features and benefits:

Significantly enhances the ability of device to perform detection and intrusion prevention

Advanced algorithm to reduce the number of false positives

IP Reputation is disabled by default

Supports the Emerging Threats' ET Intelligence™ Rep List of IPv4 addresses, categories and
reputation scores provided by Proofpoint.

Accurate and detailed information on 200,000+ IP addresses that have been identified as the
source of spam, viruses, and other malicious activity

Over 30 IP Reputation categories

Real-time threat analysis

Checks both the source and destination IP addresses in the packet

User configurable action for each IP Reputation category

Alert action logs the packet and allows the packet to continue

Drop action logs the packet and silently discards the packet

Disable action ignores the IP Reputation category

The default action for each category is alert
C613-22104-00 REV B
1
Traffic Probes
Internet
5
IP address score
<
Threshold
Action: Pass
IP address score
> Threshold
Action: Alert (default),
Deny, Disable
Traffic
4
Downloaded&Updated to
I P
R e p
u t a t
5
i o n
D a t a
b a s
e
Advanced Network Protection
Threat
Analysis
Category: spammer
IP address A
2
IP address B
IP address C
Category: bot
IP address A
IP address D
IP address E
Category: spyware
IP address F
IP address D
3
IP address G
IP Reputation
score: 30
score: 40
score: 20
score: 30
score: 40
score: 20
score: 30
score: 15
score: 30
|
Page 15