AI Security Improvements #3 - Feedback Applied #3

Open
netops wants to merge 1 commits from ai-suggestions-20250905-001500 into main

9
ai_suggestions.conf Normal file
View File

@@ -0,0 +1,9 @@
# MANDATORY: Address-set definitions
set security address-book global address-set INTERNAL-NETS address 192.168.100.0/24
set security address-book global address-set EXTERNAL-NETS address 0.0.0.0/8
set security address-book global address-set DMZ-NETS address 10.0.0.0/8
# DDoS Protection - Fixed thresholds (no XML!)
set security screen ids-option WAN-screen icmp flood threshold 20
set security screen ids-option WAN-screen tcp syn-flood attack-threshold 20
set security zones security-zone WAN screen WAN-screen