D-Link NetDefend DFL-CP310 User Manual page 260

Using SmartDefense
In this field... Do this...
In a period of SmartDefense detects ports scans by measuring the number of ports
[seconds] accessed over a period of time. The number of ports accessed must exceed
the Number of ports accessed value, within the number of seconds specified by
the In a period of [seconds] value, in order for SmartDefense to consider the
activity a scan.
Type the maximum number of seconds that can elapse, during which the
Number of ports accessed threshold is exceeded, in order for SmartDefense to
detect the activity as a port scan.
For example, if this value is 20, and the Number of ports accessed threshold is
exceeded for 15 seconds, SmartDefens will detect the activity as a port
scan. If the threshold is exceeded for 30 seconds, SmartDefense will n
detect the activity as a port scan.
The default value is 20 seconds.
Track Specify whether to issue logs for scans, by selecting one of the following:
•
•
Detect scans Specify whether to detect only scans originating from the Internet, by
from Internet only selecting one of the following:
•
•
244
Log. Issue logs. This is the default.
None. Do not issue logs. This is the default.
False. Do not detect only scans from the Internet. This is the
default.
True. Detect only scans from the Internet.
e
D-Link NetDefend firewall User Guide
ot