AirLive IAR-5000 v2 - Manual (Page 174)

13. Anomaly Flow IP
169 AirLive IAR-5000 User’s Manual
Figure 13-1 Anomaly Flow IP Settings
To block intrusion packets, enable co-defense system to notify the
designated switch to act against the attack.
Safe IP Addresses can be used for excluding specific IP from
detection.
Step2. When a DDoS attack occurs, IAR-5000 will warn about the anomaly flow under
Anomaly Flow IP
Æ Safe IP Addresses or alert both the victim user and the
system administrator about it through a NetBIOS broadcast. (Figure 13-2, 3, 4)
Figure 13-2 Virus Infected IP