Configuring the Zone-based Defense Policy

After basic policies are configured, a basic attack defense policy is automatically generated on the devices associated with the Zone. You need to configure the attack defense policy based on live network traffic.

Prerequisites

The defense mode of the Zone has been configured. For details, see Configuring a Defense Mode.

Procedure

Choose Defense > Policy Settings > Zone.
Click of the Zone.
On the Defense Policy tab, click in the Operation column of the default defense policy starting with basic.
The name of the default defense policy consists of basic and the IP address of the associated device. For example, if the IP address of the device is 128.18.60.36, the name of the default defense policy is basic_128_18_60_36.
Configure defense policies for protocols.
(Optional) If a Zone is associated with multiple devices, you can click the Defense Policy tab and then click to copy a defense policy from one associated device to another.

TCP Defense Policy
The defense policies for TCP services cover block, traffic limiting, and defense.
UDP Defense Policy
The defense policies for UDP services cover block, traffic limiting, and defense.
ICMP Defense Policy
The defense policies for ICMP services cover block, and traffic limiting.
Other Defense Policy
The defense policiescover block, traffic limiting, and defense for services except the TCP, UDP, ICMP, DNS, SIP, HTTP, and HTTPS services.
DNS Defense Policy
The defense policies for DNS services transmitted over UDP cover traffic limiting, and defense.
SIP Defense Policy
The defense policies for SIP services .
HTTP Defense Policy
The defense policies for HTTP services cover defense.
HTTPS Defense Policy
The defense policies for HTTPS services cover defense.
Top N Study
After the top N study function is configured, you can view learning results, which act as policy parameters for tracing attack sources and confirming cleaning effects.
First Packet Check
The anti-DDoS device provides first-packet checks for SYN, TCP, UDP, ICMP, and DNS packets.

Parent topic: Configuring the Zone-based Defense Policy