From 9b03b78da31034396344da8a20290f3034101eff Mon Sep 17 00:00:00 2001 From: netops Date: Fri, 5 Sep 2025 00:25:04 +0000 Subject: [PATCH] Add AI security improvements with feedback learning --- ai_suggestions.conf | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 ai_suggestions.conf diff --git a/ai_suggestions.conf b/ai_suggestions.conf new file mode 100644 index 0000000..8674947 --- /dev/null +++ b/ai_suggestions.conf @@ -0,0 +1,9 @@ +# MANDATORY: Address-set definitions +set security address-book global address-set INTERNAL-NETS address 192.168.100.0/24 +set security address-book global address-set EXTERNAL-NETS address 0.0.0.0/8 +set security address-book global address-set DMZ-NETS address 10.0.0.0/8 + +# DDoS Protection - Fixed thresholds (no XML!) +set security screen ids-option WAN-screen icmp flood threshold 20 +set security screen ids-option WAN-screen tcp syn-flood attack-threshold 20 +set security zones security-zone WAN screen WAN-screen -- 2.49.1