Selecting the interfaces to monitor, Disabling monitoring interfaces, Configuring checksum verification – Fortinet FortiGate 4000 User Manual
Page 272
272
Fortinet Inc.
Detecting attacks
Network Intrusion Detection System (NIDS)
Selecting the interfaces to monitor
To select the interfaces to monitor for attacks
1
Go to NIDS > Detection > General.
2
Select the interfaces to monitor for network attacks.
You can select up to a total of 4 interfaces and VLAN subinterfaces.
3
Select Apply.
Disabling monitoring interfaces
To disable monitoring interfaces for attacks
1
Go to NIDS > Detection > General.
2
Clear the check box for all the interfaces that you do not want monitored.
3
Select Apply.
Configuring checksum verification
Checksum verification tests the files that pass through the FortiGate unit to make sure
that they have not been changed in transit. The NIDS can run checksum verification
on IP, TCP, UDP, and ICMP traffic. For maximum detection, you can turn on checksum
verification for all types of traffic. However, if the FortiGate unit does not need to run
checksum verification, you can turn it off for some or all types of traffic to improve
system performance. For example, you might not need to run checksum verification if
the FortiGate unit is installed behind a router that also does checksum verification.
To configure checksum verification
1
Go to NIDS > Detection > General.
2
Select the type of traffic that you want to run Checksum Verifications on.
3
Select Apply.
Figure 79: Example NIDS detection configuration