{"id":29690,"date":"2024-06-28T09:06:49","date_gmt":"2024-06-28T09:06:49","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=29690"},"modified":"2026-04-17T18:07:57","modified_gmt":"2026-04-17T18:07:57","slug":"introduction-to-nta-auto-learning-function","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/introduction-to-nta-auto-learning-function\/","title":{"rendered":"Introduction to NTA Auto-learning Function"},"content":{"rendered":"\n

The implementation of DDoS attack alerting relies on setting alert thresholds. Setting the threshold too high may result in false negatives, while setting it too low may lead to a high number of false positives. Therefore, it is crucial to establish appropriate thresholds. NTA provides automatically learn, record, and analyze network traffic from the IP group, generating suitable thresholds for detecting various DDoS attacks. NTA determines this upper limit by learning the traffic patterns over a certain period and employs it as the threshold for attack alerts. This process is known as traffic auto-learning.<\/p>\n\n\n\n

Generally, traffic auto-learning is performed in three steps:<\/p>\n\n\n\n

Auto-learning start -> Alert thresholds generate -> Apply to IP group. <\/p>\n\n\n\n

The configuration procedure is as follows:<\/p>\n\n\n\n

Auto-learning start<\/strong><\/h2>\n\n\n\n

1. Access to Configuration -> Objects -> Regions<\/strong> page by clicking \"Red in the Operation<\/strong> column.<\/p>\n\n\n

\n
\"Screenshot<\/a><\/figure>\n<\/div>\n\n\n

2. Click Start Learning<\/strong> in a certain attack type. Alternatively, you can click Bulk<\/strong> Learn<\/strong> to start learning for all attack types.<\/p>\n\n\n

\n
\"Dashboard<\/a><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

Alert thresholds generate<\/strong><\/h2>\n\n\n\n

1. Configure basic settings in the dialog box.<\/p>\n\n\n\n

(1) Apply immediately<\/strong>: indicates that baseline thresholds are applied for DDoS attack detection immediately after traffic auto-learning is completed.<\/p>\n\n\n\n

(2) Not apply<\/strong>: indicates that fixed thresholds are still used after traffic auto-learning is completed. In this case, performing manual operations to make the baseline thresholds take effect is required.<\/p>\n\n\n

\n
\"Screenshot<\/a><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

2. Click OK<\/strong> to start the learning. The figure below shows the learning is in progress.<\/p>\n\n\n

\n
\"Person<\/a><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

3. Apply the threshold<\/p>\n\n\n\n

(1) If Apply Immediately is selected in step 2, the status \"Red is shown on the Threshold Configuration page.<\/p>\n\n\n

\n
\"Red<\/a><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

(2) If Not apply <\/strong>is selected in step 2, click Apply<\/strong> from the drop-down menu of Operation<\/strong>. Then, the learning result is applied for attack detection.<\/p>\n\n\n

\n
\"Red<\/a><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

Question:<\/strong><\/p>\n\n\n\n

Q: Can NTA detection work normally when the threshold is learning?<\/p>\n\n\n\n

A: Yes. During the learning process, a fixed threshold could be configured, and NTA will use this fixed value to detect traffic. \"Red shows the fixed thresholds are used.<\/p>\n\n\n

\n
\"Red<\/a><\/figure>\n<\/div><\/body><\/html>\n","protected":false},"excerpt":{"rendered":"

The implementation of DDoS attack alerting relies on setting alert thresholds. Setting the threshold too high may result in false negatives, while setting it too low may lead to a high number of false positives. Therefore, it is crucial to establish appropriate thresholds. NTA provides automatically learn, record, and analyze network traffic from the IP […]<\/p>\n","protected":false},"author":1,"featured_media":35644,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"categories":[12],"tags":[487],"class_list":["post-29690","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nta","tag-knowledge-base"],"acf":[],"yoast_head":"\nIntroduction to NTA Auto-learning Function - NSFOCUS<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Introduction to NTA Auto-learning Function - NSFOCUS\" \/>\n<meta property=\"og:description\" content=\"The implementation of DDoS attack alerting relies on setting alert thresholds. Setting the threshold too high may result in false negatives, while setting\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/\" \/>\n<meta property=\"og:site_name\" content=\"NSFOCUS\" \/>\n<meta property=\"article:published_time\" content=\"2024-06-28T09:06:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-17T18:07:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/06\/1-1.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Introduction to NTA Auto-learning Function - NSFOCUS\" \/>\n<meta name=\"twitter:description\" content=\"The implementation of DDoS attack alerting relies on setting alert thresholds. Setting the threshold too high may result in false negatives, while setting\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/06\/1-1.png\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\"},\"headline\":\"Introduction to NTA Auto-learning Function\",\"datePublished\":\"2024-06-28T09:06:49+00:00\",\"dateModified\":\"2026-04-17T18:07:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/\"},\"wordCount\":323,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/1-1.png\",\"keywords\":[\"knowledge base;\"],\"articleSection\":[\"NTA\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/\",\"name\":\"Introduction to NTA Auto-learning Function - NSFOCUS\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/1-1.png\",\"datePublished\":\"2024-06-28T09:06:49+00:00\",\"dateModified\":\"2026-04-17T18:07:57+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/1-1.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/1-1.png\",\"width\":38,\"height\":30,\"caption\":\"Bar graph icon with blue bars.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/introduction-to-nta-auto-learning-function\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nsfocusglobal.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Introduction to NTA Auto-learning Function\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"name\":\"NSFOCUS\",\"description\":\"Security Made Smart and Simple\",\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\",\"name\":\"NSFOCUS\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"width\":248,\"height\":36,\"caption\":\"NSFOCUS\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/nsfocusglobal.com\"],\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Introduction to NTA Auto-learning Function - NSFOCUS","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"pt_BR","og_type":"article","og_title":"Introduction to NTA Auto-learning Function - NSFOCUS","og_description":"The implementation of DDoS attack alerting relies on setting alert thresholds. Setting the threshold too high may result in false negatives, while setting","og_url":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/","og_site_name":"NSFOCUS","article_published_time":"2024-06-28T09:06:49+00:00","article_modified_time":"2026-04-17T18:07:57+00:00","og_image":[{"url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/06\/1-1.png","type":"","width":"","height":""}],"author":"admin","twitter_card":"summary_large_image","twitter_title":"Introduction to NTA Auto-learning Function - NSFOCUS","twitter_description":"The implementation of DDoS attack alerting relies on setting alert thresholds. Setting the threshold too high may result in false negatives, while setting","twitter_image":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/06\/1-1.png","twitter_misc":{"Escrito por":"admin","Est. tempo de leitura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/#article","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/"},"author":{"name":"admin","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d"},"headline":"Introduction to NTA Auto-learning Function","datePublished":"2024-06-28T09:06:49+00:00","dateModified":"2026-04-17T18:07:57+00:00","mainEntityOfPage":{"@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/"},"wordCount":323,"commentCount":0,"publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"image":{"@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/06\/1-1.png","keywords":["knowledge base;"],"articleSection":["NTA"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/","url":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/","name":"Introduction to NTA Auto-learning Function - NSFOCUS","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/#primaryimage"},"image":{"@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/06\/1-1.png","datePublished":"2024-06-28T09:06:49+00:00","dateModified":"2026-04-17T18:07:57+00:00","breadcrumb":{"@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/#primaryimage","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/06\/1-1.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/06\/1-1.png","width":38,"height":30,"caption":"Bar graph icon with blue bars."},{"@type":"BreadcrumbList","@id":"https:\/\/nsfocusglobal.com\/introduction-to-nta-auto-learning-function\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nsfocusglobal.com\/"},{"@type":"ListItem","position":2,"name":"Introduction to NTA Auto-learning Function"}]},{"@type":"WebSite","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website","url":"https:\/\/nsfocusglobal.com\/pt-br\/","name":"NSFOCUS","description":"Security Made Smart and Simple","publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nsfocusglobal.com\/pt-br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization","name":"NSFOCUS","url":"https:\/\/nsfocusglobal.com\/pt-br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","width":248,"height":36,"caption":"NSFOCUS"},"image":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d","name":"admin","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/nsfocusglobal.com"],"url":"https:\/\/nsfocusglobal.com\/pt-br\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/29690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/comments?post=29690"}],"version-history":[{"count":0,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/29690\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media\/35644"}],"wp:attachment":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media?parent=29690"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/categories?post=29690"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/tags?post=29690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}