M86 Security R3000 Series Evaluation Manual page 43

d. Set the Flood Tolerance Delay (in seconds) to determine the maximum
delay that will occur before a user who accesses the same URL will receive
another block page. If a user receives a block page and attempts to flood the
filter through rapid refresh of the page, the X-Strikes feature will not log a
strike for every attempt but instead log a strike for each Flood Tolerance
Delay threshold that reached. For example, if an employee accesses a
blocked site monitored by X-Strikes (which is set at 3 strikes in 1 minute for
lockdown), he receives a block page and X-Strikes logs one strike. If the
Flood Tolerance Delay is set at 4 seconds, the employee keeps getting block
pages, but won't be locked down until 12 seconds has elapsed—no matter
how many times he tries to refresh the blocked site.
e. Specify the Locked Life Time (Measured in Minutes) to determine how
long Internet access will be denied.
4. Select the Email Alert tab, and make the following settings:
a. In the Minutes Past Midnight Before Starting Time Interval field, enter the
number of minutes past midnight that a locked work station email alert will
first be sent to the specified recipient(s).
b. In the Interval Minutes to Wait Before Sending Alerts field, enter the
number of minutes within the 24-hour period that should elapse between
email alerts. For example, by entering 300 in this field and 30 in the previous
field, if there are any locked workstations, an email will be sent at 5:30 AM,
10:30 AM, 3:30 PM, 8:30 PM and 12:00 AM (the email alert at midnight fills
the gap before the time interval is reset). To check the time(s) the email alert
is scheduled to occur, click the Display Sending Time button to open the Daily
Schedule pop up window in the (HH:MM:SS) format.
c. Click Save to save the settings.
d. In the Email Address field, enter the email address(es) of those who will
receive locked workstation alerts.
e. Click Add to include them in the list.
5. Select the Categories tab.
6. Move the categories from the No Strike category you want monitored to the
Strike Categories and vice versa.
M86 S , R3000 E
ECURITY VALUATION
C
ONFIGURE AND
G
UIDE
T R3000 R T
EST THE EAL IME
P X-S B
ROBES AND TRIKES LOCKING
39