Fortinet black logo

Handbook

Protection profile settings

Copy Link
Copy Doc ID 369dfb00-033f-11ed-bb32-fa163e15d75b:62031
Download PDF

Protection profile settings

This section of Service Protection Policy allows the user to associate different protocol mitigations to SPP Rule. Every service protection policy can link profiles for mitigations of IP, ICMP, TCP, HTTP, SSL/TLS, NTP, DNS and DTLS.

Note: Each SPP Rule can only be associated with one profile of each type at a time.

Tooltip

To configure using the CLI:

config ddos spp rule

edit <spp_name>

set http-profile <http_profile_name>

set ntp-profile <ntp_profile_name>

set dns-profile <dns_profile_name>

set tcp-profile <tcp_profile_name>

set ssltls-profile <ssltls_profile_name>

set ip-profile <ip_profile_name>

set icmp-profile <icmp_profile_name>

set dtls-profile <dtls_profile_name>

next

end

Protection profile settings

This section of Service Protection Policy allows the user to associate different protocol mitigations to SPP Rule. Every service protection policy can link profiles for mitigations of IP, ICMP, TCP, HTTP, SSL/TLS, NTP, DNS and DTLS.

Note: Each SPP Rule can only be associated with one profile of each type at a time.

Tooltip

To configure using the CLI:

config ddos spp rule

edit <spp_name>

set http-profile <http_profile_name>

set ntp-profile <ntp_profile_name>

set dns-profile <dns_profile_name>

set tcp-profile <tcp_profile_name>

set ssltls-profile <ssltls_profile_name>

set ip-profile <ip_profile_name>

set icmp-profile <icmp_profile_name>

set dtls-profile <dtls_profile_name>

next

end