AI Security Improvements #3 - Feedback Applied #3
9
ai_suggestions.conf
Normal file
9
ai_suggestions.conf
Normal file
@@ -0,0 +1,9 @@
|
|||||||
|
# MANDATORY: Address-set definitions
|
||||||
|
set security address-book global address-set INTERNAL-NETS address 192.168.100.0/24
|
||||||
|
set security address-book global address-set EXTERNAL-NETS address 0.0.0.0/8
|
||||||
|
set security address-book global address-set DMZ-NETS address 10.0.0.0/8
|
||||||
|
|
||||||
|
# DDoS Protection - Fixed thresholds (no XML!)
|
||||||
|
set security screen ids-option WAN-screen icmp flood threshold 20
|
||||||
|
set security screen ids-option WAN-screen tcp syn-flood attack-threshold 20
|
||||||
|
set security zones security-zone WAN screen WAN-screen
|
||||||
Reference in New Issue
Block a user