3.128. ScannerProtection

Home Prev	cOS Core 15.00.01 CLI Reference Guide	Next

Description

Scanner Protection protects the firewall against various forms of scanning, probing and password brute force attacks. Detected scanner sources are automatically blacklisted for efficient blocking. Specific hosts can be excluded from Scanner Protection using the Whitelist.

Properties

EnableScannerBlacklist: Scanner Protection looks up source IP addresses in the IP reputation database and adds malicious sources to the Blacklist. (Default: No)
Interfaces: Interfaces to protect from attacks. Normally the interfaces towards the Internet. (Optional)
Attribute: Special Attribute of the current object. (Optional)
LogEnabled: Enable logging. (Default: Yes)
LogSeverity: Specifies with what severity log events will be sent to the specified log receivers. (Default: Default)
Comments: Text describing the current object. (Optional)

	Note
	This object type does not have an identifier and is identified by the name of the type only. There can only be one instance of this type.