HP X Unified Security Platform Series Guia do Utilizador descarregar pdf (Página 52)

Chapter 3. Command Reference

44 X Family CLI Reference V 2.5.1

conf t filter

The configure filter command configures a filter’s state and category for action set usage. The

available states include disabled and enabled. When you configure a filter, you must know and enter

the number for the filter. Only the reset subcommand supports “all” as an option.

number [-profile “profile-name”] adaptive-config

enables adaptive filtering for the filter. You must enter a filter number. You can optionally

include a profile and slot for the filter’s setting.

number [-profile “profile-name”] no adaptive-config

disables adaptive filtering for the filter. You must enter a filter number. You can optionally

include a profile and slot for the filter’s setting.

number [-profile “profile-name”] add-exception source dest

creates and adds an exception to a filter. You must include a filter number, source IP address,

and destination IP address. You can optionally include a profile and slot.

number [-profile “profile-name” ] delete-copy

deletes a copy of the filter. You must enter a filter number and profile in the command. The

slot is optional.

number [-profile “profile-name”] disable

disables a filter given the number. You must enter a filter number. You can optionally include a

profile and slot.

number [-profile “profile-name”] enable

enables a filter given the number. Do not use all in this command. You must enter a filter

number. You can optionally include a profile and slot. The command also includes an option

for action set.

-action-set string

specifies an action set for the filter.

number [-profile “profile-name”] remove-exception source dest

deletes an exception from a filter. You must include a filter number, source IP address, and

destination IP address. You can optionally include a profile and slot.

number [-profile profile-name] threshold threshold

enables you to modify threshold settings of port scan and and host sweep filters. A scan/

sweep user policy must already exist.

number [-profile profile-name] timeout seconds

enables you to modify timeout settings of port scan and and host sweep filters. A scan/sweep

user policy must already exist.

number [-profile “profile-name”] use-category

sets the specified filter to use the action set of its category, removing any previous overrides.

You must enter a filter number. You can optionally include a profile and slot.

1 2 ... 47 48 49 50 51 52 53 54 55 56 57 ... 141 142

Sem comentários

HP X Unified Security Platform Series Guia do Utilizador Página 52