This section describes settings of the Network Threat Protection task.
All available values and default values for each setting are described below.
BlockAttackingHosts
Enables or disables blocking network activity from attacking computers.
Available values:
Yes—Block network activity from attacking computers.
No—Do not block network activity from attacking computers.
Default value: Yes
BlockDurationMinutes
Specifies how long attacking computers will be blocked (in minutes).
Available values:
1–32768
Default value: 60
UseExcludeIPs
Enables or disables the usage of a list of IP addresses whose network activity will not be blocked when a network attack is detected. The application will only log information about dangerous activity from these computers.
You can add IP addresses to the exclusion list by using the ExcludeIPs.item_# parameter. By default, the list is empty.
Available values:
Yes—Use an IP address exclusion list.
No—Do not use an IP address exclusion list.
Default value: No
ExcludeIPs.item_#
Specifies an IP address whose network activity will not be blocked by the application.
Available values:
d.d.d.d—IPv4 address, where d is a decimal number 0–255
d.d.d.d/p—Subnet of IPv4 addresses, where p is a number 0–32
x:x:x:x:x:x:x:x—IPv6 address, where x is a hexadecimal number 0–ffff
x:x:x:x::0/p—Subnet of IPv6 addresses, where p is a number 0–64