HP X Unified Security Platform Series Bedienungsanleitung PDF herunterladen (Seite 59)

Traffic Threshold Filters

X Family LSM User’s Guide V 2.5.1 43

Configure a Traffic Threshold Filter

STEP 1

From the LSM menu, select IPS > Traffic Threshold.

STEP 2

On the Traffic Threshold Filters page, click Create or click on the name of the Traffic Thresh-

old filter you want to edit.

STEP 3

On the Create/Edit Traffic Threshold Filters page in the Filter Parameters section, type or

edit the Filter Name.

STEP 4

Select the traffic source and destination security zones in the Incoming Security Zone and

Outgoing Security Zone drop-down lists.

STEP 5

In the Units per Second field, select the traffic units you want to track: Packets, Bytes, or

Connections. Then, specify the historical time period used to calculate the baseline traffic

level to compare against: minute, hour, day, 7 days, 30 days, and .

STEP 6

For Monitoring, select an option: Monitor only or Monitor with thresholds.

The monitor only option sets the device to generate a report without triggering traffic

thresholds.

STEP 7

Configure up to 4 threshold parameter settings, state (enable/disable), and action for the fil-

ter:

Thresholds settings are specified as a percentage change from the “normal” baseline.

STEP A

In Above Normal Major Threshold, select the Enabled check box, enter a

percentage amount of normal. Then, select the action to perform when the filter

triggers.

STEP B

For Above Normal Minor, select the Enabled check box, enter a percentage

amount of normal. Then, select the action to perform when the filter triggers.

STEP C

For Below Normal Major, select the Enabled check box, enter a percentage amount

of normal. Then, select the action to perform when the filter triggers.

Type Select the traffic protocol or application type of the traffic to be

monitored:

• Protocol — monitor traffic from the selected protocol: TCP,

Other, ICMP, and UDP.

• Application — monitor traffic for the selected application type

on the specified port: TCP or UDP and the Port.

Apply to: specify whether the filter monitor tracks requests,

replies, or both.

Period The period of time for the historical data used to calculate the

baseline traffic rate: minute, hour, day, 7 days, 30 days, and 35

days.

Table 3–6: Traffic Threshold Filters Configuration Parameters (Continued)

Column Definition

1 2 ... 54 55 56 57 58 59 60 61 62 63 64 ... 332 333

Kommentare zu diesen Handbüchern

Keine Kommentare

HP X Unified Security Platform Series Bedienungsanleitung Seite 59

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Vernetzung HP X Unified Security Platform Series