config firewall DoS-policy

Configure IPv4 DoS policies.

config firewall DoS-policy
    Description: Configure IPv4 DoS policies.
    edit <policyid>
        config anomaly
            Description: Anomaly name.
            edit <name>
                set action [pass|block]
                set log [enable|disable]
                set quarantine [none|attacker]
                set quarantine-expiry {user}
                set quarantine-log [disable|enable]
                set status [disable|enable]
                set threshold {integer}
                set threshold(default) {integer}
            next
        end
        set comments {var-string}
        set dstaddr <name1>, <name2>, ...
        set interface {string}
        set name {string}
        set service <name1>, <name2>, ...
        set srcaddr <name1>, <name2>, ...
        set status [enable|disable]
    next
end

config firewall DoS-policy

Parameter

Description

Type

Size

Default

comments

Comment.

var-string

Maximum length: 1023

dstaddr <name>

Destination address name from available addresses.

Address name.

string

Maximum length: 79

interface

Incoming interface name from available interfaces.

string

Maximum length: 35

name

Policy name.

string

Maximum length: 35

policyid

Policy ID.

integer

Minimum value: 0 Maximum value: 9999 **

service <name>

Service object from available options.

Service name.

string

Maximum length: 79

srcaddr <name>

Source address name from available addresses.

Address name.

string

Maximum length: 79

status

Enable/disable this policy.

option

enable

Option	Description
enable	Enable this policy.
disable	Disable this policy.

** Values may differ between models.

config anomaly

Parameter

Description

Type

Size

Default

action

Action taken when the threshold is reached.

option

pass

Option	Description
pass	Allow traffic but record a log message if logging is enabled.
block	Block traffic if this anomaly is found.

log

Enable/disable anomaly logging.

option

disable

Option	Description
enable	Enable anomaly logging.
disable	Disable anomaly logging.

name

Anomaly name.

string

Maximum length: 63

quarantine

Quarantine method.

option

none

Option	Description
none	Quarantine is disabled.
attacker	Block all traffic sent from attacker's IP address. The attacker's IP address is also added to the banned user list. The target's address is not affected.

quarantine-expiry

Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.

user

Not Specified

quarantine-log

Enable/disable quarantine logging.

option

enable

Option	Description
disable	Disable quarantine logging.
enable	Enable quarantine logging.

status

Enable/disable this anomaly.

option

disable

Option	Description
disable	Disable this status.
enable	Enable this status.

threshold

Anomaly threshold. Number of detected instances (packets per second or concurrent session number) that triggers the anomaly action.

integer

Minimum value: 1 Maximum value: 2147483647

threshold(default)

Number of detected instances (packets per second or concurrent session number) which triggers action (1 - 2147483647, default = 1000). Note that each anomaly has a different threshold value assigned to it. Read-only.

integer

Minimum value: 0 Maximum value: 4294967295

config firewall DoS-policy

Configure IPv4 DoS policies.

config firewall DoS-policy
    Description: Configure IPv4 DoS policies.
    edit <policyid>
        config anomaly
            Description: Anomaly name.
            edit <name>
                set action [pass|block]
                set log [enable|disable]
                set quarantine [none|attacker]
                set quarantine-expiry {user}
                set quarantine-log [disable|enable]
                set status [disable|enable]
                set threshold {integer}
                set threshold(default) {integer}
            next
        end
        set comments {var-string}
        set dstaddr <name1>, <name2>, ...
        set interface {string}
        set name {string}
        set service <name1>, <name2>, ...
        set srcaddr <name1>, <name2>, ...
        set status [enable|disable]
    next
end

config firewall DoS-policy

Parameter

Description

Type

Size

Default

comments

Comment.

var-string

Maximum length: 1023

dstaddr <name>

Destination address name from available addresses.

Address name.

string

Maximum length: 79

interface

Incoming interface name from available interfaces.

string

Maximum length: 35

name

Policy name.

string

Maximum length: 35

policyid

Policy ID.

integer

Minimum value: 0 Maximum value: 9999 **

service <name>

Service object from available options.

Service name.

string

Maximum length: 79

srcaddr <name>

Source address name from available addresses.

Address name.

string

Maximum length: 79

status

Enable/disable this policy.

option

enable

Option	Description
enable	Enable this policy.
disable	Disable this policy.

** Values may differ between models.

config anomaly

Parameter

Description

Type

Size

Default

action

Action taken when the threshold is reached.

option

pass

Option	Description
pass	Allow traffic but record a log message if logging is enabled.
block	Block traffic if this anomaly is found.

log

Enable/disable anomaly logging.

option

disable

Option	Description
enable	Enable anomaly logging.
disable	Disable anomaly logging.

name

Anomaly name.

string

Maximum length: 63

quarantine

Quarantine method.

option

none

Option	Description
none	Quarantine is disabled.
attacker	Block all traffic sent from attacker's IP address. The attacker's IP address is also added to the banned user list. The target's address is not affected.

quarantine-expiry

Duration of quarantine. (Format ###d##h##m, minimum 1m, maximum 364d23h59m, default = 5m). Requires quarantine set to attacker.

user

Not Specified

quarantine-log

Enable/disable quarantine logging.

option

enable

Option	Description
disable	Disable quarantine logging.
enable	Enable quarantine logging.

status

Enable/disable this anomaly.

option

disable

Option	Description
disable	Disable this status.
enable	Enable this status.

threshold

Anomaly threshold. Number of detected instances (packets per second or concurrent session number) that triggers the anomaly action.

integer

Minimum value: 1 Maximum value: 2147483647

threshold(default)

integer

Minimum value: 0 Maximum value: 4294967295

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

Web Application / API Protection

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

All Products

CLI Reference

config firewall DoS-policy

config firewall DoS-policy

config firewall DoS-policy

config anomaly

config firewall DoS-policy

config firewall DoS-policy

config firewall DoS-policy

config anomaly