Security Set Ids Scanperiod - Ericsson HM4x0 Reference Manual

19.45

security set IDS scanperiod

19.45.1 Syntax
security set IDS scanperiod <duration>
19.45.2 Description
This command allows you to set the time limit during which scanning type
traffic (such as closed TCP port reviving SYN/ACK, FIN or RST) is counted. If
the number of scanning packets counted within the specified duration is
greater than the threshold set by security set IDS scanthreshold, the
suspected attacker is blocked for the time limit specified in the command
security set IDS SCANattackblock.
Note:
19.45.3 Options
The following table gives the range of values for each option which can be
specified with this command and a default value (if applicable).
Option
duration
19.45.4 Example
--> security set IDS scanperiod 90
2/1553-ZAT 759 94 Uen B – December 2005
This CLI command is case-sensitive. You must type the command
attributes exactly as they appear in the syntax section of this page. If
you do not use the same case-sensitive syntax, the command fails
and the CLI displays a syntax error message.
Description
The length of time (in seconds) that
scanning type traffic is counted for.
Security CLI Commands
Default value
60
591