Configuring intrusion detection
Security > Intrusion Detection lets you manually add IP addresses to be exempted from being blocked, remove system added exempt IP addresses if you find them suspicious, and configure intrusion detection settings.
The manually added IP addresses are usually from the sources that you trust. For example, IP addresses from external customer devices can be added.
The IP addresses of the devices that are registered to the FortiVoice unit are automatically added to the exempt list.
To add an exempt IP address
- Go to Security > Intrusion Detection > Exempt IP.
- Click New.
- Enter the IP address.
- Click Create.
To remove an auto exempt IP
- Go to Security > Intrusion Detection > Auto Exempt IP.
- Select an IP address you want to remove and click Delete.
To configure intrusion detection settings
- Go to Security > Intrusion Detection > Setting.
- Configure the following:
GUI field
Description
Status
- Disable: Select to stop the intrusion detection activities.
- Monitor Only: Select to only track the intrusion detection activities.
- Enable: Select to activate the intrusion detection activities.
Access tracking
Select the method to track the traffic access (and IPs) to the FortiVoice unit.
Initial block period
Enter the time in minutes to initially block every new device/IP address trying to access the FortiVoice unit. This is to screen out spammers or attackers because they normally will not try again after being blocked initially.
- Click Apply.