HP VPN Firewall Appliances Attack Protection Command Reference
ii
arp anti-attack source-mac exclude-mac ············································································································· 42
arp anti-attack source-mac threshold ··················································································································· 43
display arp anti-attack source-mac ······················································································································ 43
ARP packet source MAC consistency check configuration commands ···································································· 44
arp anti-attack valid-ack enable ··························································································································· 44
ARP active acknowledgement configuration commands ··························································································· 45
arp anti-attack active-ack enable ························································································································· 45
ARP detection configuration commands ······················································································································ 46
arp detection ·························································································································································· 46
arp detection enable ············································································································································· 47
arp detection trust ·················································································································································· 48
arp detection validate ··········································································································································· 48
arp restricted-forwarding enable ························································································································· 49
display arp detection ············································································································································ 49
display arp detection statistics ····························································································································· 50
reset arp detection statistics ·································································································································· 51
ARP automatic scanning and fixed ARP configuration commands ··········································································· 52
arp fixup ································································································································································· 52
arp scan ································································································································································· 52
TCP attack protection commands ······························································································································ 54
display tcp status ··················································································································································· 54
tcp anti-naptha enable ·········································································································································· 54
tcp state ·································································································································································· 55
tcp syn-cookie enable ··········································································································································· 56
tcp timer check-state ·············································································································································· 56
ND attack defense commands ·································································································································· 58
ipv6 nd mac-check enable ··································································································································· 58
Firewall commands ···················································································································································· 59
IPv6 packet-filter firewall configuration commands ···································································································· 59
display firewall ipv6 statistics ······························································································································ 59
firewall ipv6 default ·············································································································································· 60
firewall ipv6 enable ·············································································································································· 61
firewall packet-filter ipv6 ······································································································································ 61
reset firewall ipv6 statistics ··································································································································· 62
ASPF configuration commands ····································································································································· 62
display port-mapping ············································································································································ 62
firewall aspf enable ·············································································································································· 64
port-mapping ························································································································································· 64
Content filtering commands ······································································································································· 66
activex-blocking enable ········································································································································ 66
attachment-body-filtering keyword-entry·············································································································· 66
attachment-name-filtering filename-entry ············································································································· 67
body-filtering keyword-entry ································································································································· 68
command-filtering keyword-entry ························································································································· 69
content-filtering activex-blocking suffix ················································································································ 70
content-filtering email-address-entry ····················································································································· 71
content-filtering filename-entry ······························································································································ 72
content-filtering ftp-policy ······································································································································ 72
content-filtering java-blocking suffix····················································································································· 73
content-filtering http-policy ···································································································································· 74
content-filtering keyword-entry ····························································································································· 74
content-filtering policy-template ···························································································································· 75