AirLive RS-3000 - Manual (Page 223)

RS-3000 Alarm and to prevent the computer which being attacked to send DDoS
packets to LAN network
STEP 2 ﹒Select Anomaly Flow IP setting and enter as the following:
 Enter The threshold sessions of anomaly flow (per Source IP) (the default value
is 100 Sessions/Sec)
 Select Enable Anomaly Flow IP Blocking and enter the Blocking Time (the default
time is 600 seconds)
 Select Enable E-Mail Alert Notification
 Select Enable NetBIOS Alert Notification
 IP Address of Administrator: Enter 192.168.1.10
 Click OK
 Anomaly Flow IP Setting is completed. (Figure20-1)
Figure20-1 Anomaly Flow IP Setting
After complete the Internal Alert Settings, if the device had detected the internal computer sending
large DDoS attack packets and then the alarm message will appear in the Virus-infected IP or send
NetBIOS Alert notification to the infected PC Administrator’s PC
If the Administrator starts the E-Mail Alert Notification in Setting, the RS-3000 will send e-mail to
Administrator automatically.
221