HP Enterprise printers - HP Connection Inspector (white paper)

3
Monitoring Window: Default: 80 mins (30 mins – 14400 mins)
The length of the window in minutes in which DNS resolution activity is counted.
• A longer window will detect slower executing connection request activity but will increase potential false positives.
Protected Mode Duration: Default: 60 mins (40 mins – 120 mins)
The minimum time in minutes the DNS Protected Mode is active once triggered.
• A higher value will mitigate stealthier malware behavior.
Figure 2: HP Connection Inspector Protected Mode Settings in the EWS
Self-Healing (Remediation) Settings
Number of Tines in Protected Mode: Default: 3 (1 – 10)
Number of DNS Protected Mode events that occur before a system restart.
• A higher value will increase the time before a system restart.
Cumulative Protected Mode Duration: Default: 80 mins (60 mins – 140 mins)
Total duration of DNS Protected mode events in minutes since device startup before initiating a system restart. The
Cumulative DNS Protected Mode setting determines when a system restart occurs.
Figure 3: HP Connection Inspector Remediation Self-Healing Settings in the EWS