12.0

To enable Intrusion Prevention
1
In the console, click Policies.
2
On the Policies page, select the Intrusion Prevention Policy, and then
right-click Edit.
3
In the policy, click Settings.
4
In the policy, click Enable Intrusion Prevention.
5
Click OK.
Blocking an attacking computer
Intrusion Prevention protection automatically blocks all communication to and
from an attacking computer for a specified period of time. Intrusion prevention
attacks are recorded in the Network Threat Protection Log.
See “Viewing the Network Threat Protection Log” on page 76.
To block an attacking computer
1
In the console, click Policies.
2
On the Policies page, select the Intrusion Prevention Policy, and then
right-click Edit.
3
In the policy, click Settings.
4
In the policy, specify the following information:
Check this box to block all communication to and from
an attacking computer.
Automatically block an
attacker's IP address
Type the number of seconds to block all communication
to and from an attacking computer.
Number of seconds during
which to block the IP
address
5
Click OK.
Specifying Intrusion Prevention exceptions
You specify the signatures that have different detection responses.
Managing intrusion prevention protection
Blocking an attacking computer
140