PCNSE - Protection Profiles for Zones and DoS Attacks
Get a hint
Reconnaissance Protection
Click the card to flip 👆
PAN-OS software monitors port scans and host sweeps using an events-per-time interval.
Port Scans - The Interval is the number of seconds to detect a given number of port scan events.
The Threshold is the number of scanned ports events, within the specified time Interval, that will trigger reconnaissance protection action.
Host Sweeps - The Interval is the number of seconds to detect a given number of host sweep events.
The Threshold is the number of scanned host events, within the specified time Interval, that will trigger reconnaissance protection action.
Port Scans - The Interval is the number of seconds to detect a given number of port scan events.
The Threshold is the number of scanned ports events, within the specified time Interval, that will trigger reconnaissance protection action.
Host Sweeps - The Interval is the number of seconds to detect a given number of host sweep events.
The Threshold is the number of scanned host events, within the specified time Interval, that will trigger reconnaissance protection action.
Click the card to flip 👆