DefensePro User Guide
Security Configuration
Document ID: RDWR-DP-V0602_UG1201
133
Configuring Global Fraud Protection
Fraud Protection uses RSA-signature feeds to protect your network from malicious, fraudulent sites.
Such sites include phishing sites, trojan drop points, and malicious-download sites.
Note:
RSA updates require purchasing a relevant license.
DefensePro can periodically receive the RSA-signature feeds by means of a scheduled task, Update
RSA Security Signature. You can also trigger an update of RSA signatures manually—using the
Update Security Signature operation.
DefensePro can store up to 500 concurrent RSA signatures.
When RSA finds a new malicious server or URL, RSA approaches the hosting provider or service
provider to take the site down. DefensePro expects that the feeds it receives become irrelevant after
a certain time. DefensePro ages the stored signatures according to the specified estimated time for
bringing down various types of malicious sites.
When Fraud Protection is enabled, you can configure Network Protection with a Signature Profile rule
that uses one or more of the following threat-type attribute values:
•
Fraud - Phishing
•
Fraud - Drop Points
•
Fraud - Malicious Download
Table 65: SIP Cracking Parameters
Parameter
Description
Tracking Type
The data that the SIP Cracking feature monitors.
Values: SIP-URI, Source IP, Both
Application Code for Reset
The SIP error code that is sent back to the source IP address.
Values:
•
Ambiguous—Event number 485.
•
Busy Everywhere—Event number 600
•
Busy Here—Event number 486
•
Decline—Event number 603
•
Forbidden
•
Not Acceptable Error—Event number 606
•
Not Acceptable Fail
•
Not Acceptable Here—Event number 488
•
Not Found—Event number 404
•
Request Terminated—Event number 487
•
Temporarily Unavailable—Event number 480
Default: Not Acceptable Error
Detect Error Codes in Server
Originated Sessions
Enables detection of error codes on sessions that originate from
the server to the client.
Default: Disabled
Summary of Contents for DefensePro 6.02
Page 1: ...DefensePro User Guide Software Version 6 02 Document ID RDWR DP V0602_UG1201 January 2012 ...
Page 2: ...DefensePro User Guide 2 Document ID RDWR DP V0602_UG1201 ...
Page 20: ...DefensePro User Guide 20 Document ID RDWR DP V0602_UG1201 ...
Page 28: ...DefensePro User Guide Table of Contents 28 Document ID RDWR DP V0602_UG1201 ...
Page 116: ...DefensePro User Guide Device Network Configuration 116 Document ID RDWR DP V0602_UG1201 ...
Page 302: ...DefensePro User Guide Real Time Security Reporting 302 Document ID RDWR DP V0602_UG1201 ...
Page 308: ...DefensePro User Guide Administering DefensePro 308 Document ID RDWR DP V0602_UG1201 ...
Page 324: ...DefensePro User Guide Troubleshooting 324 Document ID RDWR DP V0602_UG1201 ...
