F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Attack Protection Configuration Guide-6PW100

31
Figure 37 Adding a blacklist entry for Host D
d. In the Blacklist Configuration area, click Add again.
e. On the page that appears (see 305HFigure 38), enter the IP address 192.168.1.5, select Hold Time
and set the lifetime of the entry to 50 minutes.
f. Click Apply.
Figure 38 Adding a blacklist entry for Host C
4. Configure scanning detection for the untrusted zone, as shown in 306HFigure 39:
a. From the navigation tree, select Intrusion Detection > Traffic Abnormality > Scanning
Detection.
b. Select the security zone Untrust.
c. Select Enable Scanning Detection.
d. Set the scanning threshold to 4500.
e. Select Add the source IP to the blacklist.
f. Click Apply.
Figure 39 Configuring scanning detection for the untrusted zone
152BVerifying the configuration
Select Intrusion Detection > Blacklist from the navigation tree to view the manually added blacklist
entries.