Users Guide

88 | Configuration Reference Dell PowerConnect W-AirWave 7.4 | Configuration Guide
2. Select the Add button to create a new Signature Matching profile, or click the pencil icon next to an existing
profile to edit. Complete the settings as described in Table 37:
Table 37 Profiles > IDS > Denial of Service Profile Settings
Field Default Description
General Settings
Folder Top Set the folder with which the profile is associated. The drop-down menu displays all
folders available for association with the profile.
Name Blank Enter the name of the profile.
Referenced Profiles
Rate Thresholds for
Assoc Frames
default Select a profile from the drop-down menu, or click the edit (icon) or add (icon) to edit or
create a profile that sets the rate threshold for association frames. The IDS rate
threshold profile defines thresholds assigned to the different frame types for rate
anomaly checking.
Rate Thresholds for
Disassoc Frames
default Select a profile from the drop-down menu, or click the edit (icon) or add (icon) to edit or
create a profile that sets the rate threshold for disassociation frames. The IDS rate
threshold profile defines thresholds assigned to the different frame types for rate
anomaly checking.
Rate Thresholds for
Deauth Frames
default Select a profile from the drop-down menu, or click the edit (icon) or add (icon) to edit or
create a profile that sets the rate threshold for de-authentication frames. The IDS rate
threshold profile defines thresholds assigned to the different frame types for rate
anomaly checking.
Rate Thresholds for
Probe Request Frames
default Select a profile from the drop-down menu, or click the edit (icon) or add (icon) to edit or
create a profile that sets the rate threshold for probe request frames. The IDS rate
threshold profile defines thresholds assigned to the different frame types for rate
anomaly checking.
Rate Thresholds for
Probe Response
Frames
default Select a profile from the drop-down menu, or click the edit (icon) or add (icon) to edit or
create a profile that sets the rate threshold for probe response frames. The IDS rate
threshold profile defines thresholds assigned to the different frame types for rate
anomaly checking.
Rate Thresholds for
Auth Frames
default Select a profile from the drop-down menu, or click the edit (icon) or add (icon) to edit or
create a profile that sets the rate threshold for authentication frames. The IDS rate
threshold profile defines thresholds assigned to the different frame types for rate
anomaly checking.
Other Settings
Detect Disconnect
Station Attack
Yes Enables or disables detection of station disconnection attacks.
Disconnect STA Assoc
Response Threshold
5 The number of successful Association Response or Reassociation response frames
seen in an interval of 10 seconds that should trigger this event. Requires a minimum
version of 6.0.0.0.
Disconnect STA Deauth
and Disassoc Threshold
8 Rate thresholds for Disassociate frames. Requires a minimum version of 6.0.0.0
Disconnect STA
Detection Quiet Time
900 After a station disconnection attack is detected, sets the time (in seconds) that must
elapse before another identical alarm can be generated.
Spoofed Deauth
Blacklist
No Enables or disables automatic client blacklisting of spoofed de-authentication.