In the reverse proxy mode, NSFOCUS WAF preserves the real source IP address in the X-forwarded-for header. In this mode, since the destination for clients is the WAF, the WAF will record the real client IP address in this request header and forward the header to the server, which helps...
Category: Knowledge Base
Is NIPS Capable of Blocking SSH Connections?
The answer is YES! NSFOCUS NIPS can block SSH connections. You may have similar questions, for example, whether Nmap or sqlmap can be blocked by NIPS. The answer is YES, too! These questions can often be resolved by configuring application control profile. Follow these steps to enable SSH connection blocking:...
Enabling Detection to Traffic Listened on Non-Standard Ports
By default, NSFOCUS NIPS identifies the protocols and detects attacks on standard ports only. For example, File Transfer Protocol (FTP) operates on ports 20 and 21, Telnet protocol operates on port 23, and HTTP protocol uses port 80. However, the traffic using preceding protocols on non-standard ports will not be...
Description of ADS Hardware Status Alerts
1.CPU threshold The default threshold value is 80%.The system CPU usage is updated every 10 seconds. 2.Memory threshold: The default threshold value is 90%.The system memory usage is updated every 10 seconds. 3.CPU temperature threshold: The default threshold value is 90 °C.The equipment CPU temperature is updated every 10 seconds....
What Information will Master/Backup NTAs Share
After two NTAs are configured to operate as the master and backup NTAs for hot standby, the master NTA will synchronize the configuration to the backup one in real time. This will guarantee that the configuration of the backup NTA is consistent with that of the master NTA. The synchronized...
