IS200DAMBG1ABB系统备件,PLC备件
需要时间表设置将时间表应用于此规则；否则将其保留为（0）Always。如果下拉列表为空，请确保“时间表”为先决条件。请参阅“对象定义”>“调度”>“配置”选项卡“启用”默认情况下未选中单击“启用”框以激活此规则，然后保存设置。保存单击保存保存设置撤消单击撤消取消设置后退单击后退返回MAC控制配置页面。EW200工业蜂窝网关268 5.2.4 IPS为了在互联网中提供应用服务器，管理员可能需要为服务打开特定端口。然而，向互联网开放服务端口存在一些风险。为了避免此类攻击风险，启用IPS功能非常重要。入侵防护系统（IPS）是一种网络安全设备，用于监控网络和/或系统活动中的恶意活动。IPS的主要功能是识别恶意活动，记录有关此活动的信息，尝试阻止/停止并报告它。您可以启用IPS功能，并在需要时检查列出的入侵活动。您还可以启用日志警报，以便系统在检测到相应入侵时记录入侵事件。IPS场景如图所示，网关充当电子邮件服务器、Web服务器，还为远程管理提供TCP端口8080。所以，远程用户或匿名用户可以从Internet请求这些服务。启用IPS后，网关可以检测传入的攻击数据包，包括带有服务的TCP端口（25、80、110、443和8080）。它将阻止攻击数据包，并让普通数据包通过网关。EW200工业蜂窝网关269 IPS设置转到安全>防火墙>IPS选项卡。入侵防护系统（IPS）设置允许用户自定义入侵防护规则以防止恶意数据包。启用IPS防火墙配置窗口项值设置描述默认情况下未选中IPS选中启用框以激活IPS功能日志警报默认情况下不选中选中启用框来激活事件日志。保存单击保存保存设置撤消单击撤消取消设置设置入侵防护规则路由器允许您选择可能要启用的入侵防护规则。确保在启用防御功能之前启用IPS。EW200工业蜂窝网关270设置入侵防护规则项目名称值设置描述SYN洪水防御1。所需设置2。默认情况下未选中3。流量阈值默认设置为300 4。值范围可以从10到10000。单击启用框以激活此入侵预防规则，并在此字段中输入流量阈值。UDP洪水防御单击“启用”框以激活此入侵防御规则，并在此字段中输入流量阈值。ICMP洪水防御单击启用框激活
Time Schedule Required setting Apply Time Schedule to this rule; otherwise leave it as (0) Always. If the dropdown list is empty, ensure Time Schedule is pre-cond. Refer to Object Definition > Scheduling > Configuration tab Enable Unchecked by default Click Enable box to activate this rule, and then save the settings. Save Click Save to save the settings Undo Click Undo to cancel the settings Back Click Back to return to the MAC Control Configuration page. EW200 Industrial Cellular Gateway 268 5.2.4 IPS To provide application servers in the Internet, the administrator may need to open specific ports for services. However, there are some risks to open service ports to the Internet. In order to avoid such attack risks, it is important to enable IPS functions. Intrusion Prevention System (IPS) is a network security appliance that monitors network and/or system activities for malicious activity. The main functions of IPS are to identify malicious activity, log information about this activity, attempt to block/stop it and report it. You can enable the IPS function and check the listed intrusion activities when needed. You can also enable the log alerting so that the system will record Intrusion events when corresponding intrusions are detected. IPS Scenario As shown in the diagram, the gateway serves as an E-mail server, Web Server and also provides TCP port 8080 for remote administration. So, remote users or unkwn users can request those services from Internet. With IPS enabled, the gateway can detect incoming attack packets, including the TCP ports (25, 80, 110, 443 and 8080) with services. It will block the attack packets and let rmal ones pass through the gateway. EW200 Industrial Cellular Gateway 269 IPS Setting Go to Security > Firewall > IPS Tab. The Intrusion Prevention System (IPS) setting allows user to customize intrusion prevention rules to prevent malicious packets. Enable IPS Firewall Configuration Window Item Value setting Description IPS Unchecked by default Check the Enable box to activate IPS function Log Alert Unchecked by default Check the Enable box to activate to activate Event Log. Save Click Save to save the settings Undo Click Undo to cancel the settings Setup Intrusion Prevention Rules The router allows you to select intrusion prevention rules you may want to enable. Ensure that the IPS is enabled before enabling the defense function. EW200 Industrial Cellular Gateway 270 Setup Intrusion Prevention Rules Item Name Value setting Description SYN Flood Defense 1. Required setting 2. Unchecked by default 3. Traffic threshold is set to 300 by default 4. The value range can be from 10 to 10000. Click Enable box to activate this intrusion prevention rule and enter the traffic threshold in this field. UDP Flood Defense Click Enable box to activate this intrusion prevention rule and enter the traffic threshold in this field. ICMP Flood Defense Click Enable box to activate
