DefensePro User Guide
Basic Device Configuration
Document ID: RDWR-DP-V0602_UG1201
91
Configuring the Device Event Scheduler
Some network policy rules remain inactive during certain hours of the day, or are activated only
during others. For example, a school library may want to block instant messaging during school
hours, but allow it after school hours, or an enterprise may assign high priority to mail traffic
between 08:00 and 10:00.
You can schedule the activation and inactivation of specific policy rules on the device by using the
Event Scheduler, to create schedules, and then attach them to a policy rule’s configuration.
Schedules define a date and time for specific actions.
To configure the event scheduler
1. In the Configuration perspective Advanced Parameters tab navigation pane, select Event
Scheduler.
2. Do one of the following:
—
To add a schedule, click the
(Add) button.
—
To edit an entry, double-click the row.
3. Configure the parameters; and then, click OK.
Table 32: Suspend Table Parameters
Parameter
Description
Minimal Aging Timeout
The time, in seconds, for which the DefensePro suspends first-time
offending source IP addresses.
Default: 10
Maximal Aging Timeout
The maximal time, in seconds, for which the DefensePro suspends a
specific source. Each time the DefensePro suspends the same source,
the suspension length doubles until it reaches the Maximal Aging
Timeout
.
Default: 600
Maximum Entries with Same
Source IP
The number of times the DefensePro suspends the same source IP
address before the DefensePro suspends all traffic from that source
IP address—regardless of the specified Suspend Action. For example,
if the value for this parameter is 4 and the specified Suspend Action
is SrcIP-DstIP-SrcPort-DstPort, the DefensePro suspends all traffic
from a source IP address that had an entry in the Suspend list more
than four times, even if the destination IP address, source port, and
destination ports were different for the previous updates to the
Suspend Table.
This parameter is irrelevant when the specified Suspend Action is
SrcIP.
Values:
•
0—The device does not implement the feature.
•
1–10
Default: 0
Summary of Contents for DefensePro 6.02
Page 1: ...DefensePro User Guide Software Version 6 02 Document ID RDWR DP V0602_UG1201 January 2012 ...
Page 2: ...DefensePro User Guide 2 Document ID RDWR DP V0602_UG1201 ...
Page 20: ...DefensePro User Guide 20 Document ID RDWR DP V0602_UG1201 ...
Page 28: ...DefensePro User Guide Table of Contents 28 Document ID RDWR DP V0602_UG1201 ...
Page 116: ...DefensePro User Guide Device Network Configuration 116 Document ID RDWR DP V0602_UG1201 ...
Page 302: ...DefensePro User Guide Real Time Security Reporting 302 Document ID RDWR DP V0602_UG1201 ...
Page 308: ...DefensePro User Guide Administering DefensePro 308 Document ID RDWR DP V0602_UG1201 ...
Page 324: ...DefensePro User Guide Troubleshooting 324 Document ID RDWR DP V0602_UG1201 ...
