Cisco Anomaly Guard Module Web-Based Management Configuration Guide (Software Version 4.0)
Index

Table Of Contents

A - B - C - D - E - F - H - I - L - M - N - O - P - R - S - T - U - V - W - Z

Index

A

action

basic filter5-5

drop filter5-5

permit filter5-5

strong filter5-5

User filter5-5

active Dynamic filters4-5

admin privilege level3-11

anomaly flow8-18

anti-spoofing internal errors8-35

attack report

dropped/bounced packets8-14

zone8-11

attack statistics8-8, 8-13

attack summary8-9

attack type

mitigated attack8-10, 8-22

authorization, configuring3-11

auth packet types6-8, 8-30

automatic operation mode4-8

automatic protection mode7-2

automatic protect mode7-2

B

bad packets to proxy addresses8-35

basic filter actions5-5

block-unauthenticated action6-16, 7-7, 7-12

Bypass filter

configuring5-6

definition5-1

C

changing password3-10

changing privilege level3-12

client attack8-10, 8-22

comparing policies6-19

config privilege level3-11

configuring

Bypass filter5-6

Flex filter5-7

policy templates5-12

User filter5-2

connections8-29

constructing policies6-2, 6-4

counters

dropped3-5, 8-2, 8-13

forwarded8-13

legitimate3-5, 8-2

malicious3-5, 8-2

received3-5, 8-2, 8-13

replied3-5, 8-13

spoofed3-5, 8-2

viewing3-5

zone8-1

D

DDoS1-2

details

detected anomaly8-19

mitigated attack8-24

detected anomaly8-15

details8-19

type8-10, 8-17

diagnostics, viewing3-4

display area1-5

distributed denial of service, See DDoS

DNS

drop statistics8-34

policy templates5-9

drop filter action5-5, 6-16

dropped/bounced packets8-14

drop statistics8-32

TCP8-34

dst traffic characteristics6-9

Dynamic filter7-5

actions7-12

active4-5

adding7-11

definition5-2, 8-14

deleting7-10

fields7-11

pending4-5, 7-18

preventing production of7-10

table7-6

terminating4-10, 7-8

viewing7-5

viewing details7-8

dynamic privilege level3-11

E

event log, viewing3-7, 8-6

F

filter

Bypass5-1

Dynamic5-2, 7-5, 8-14

Flex5-2, 8-14

User5-1, 8-14

zone5-1

filter/drop6-16, 7-7, 7-12

filter/strong6-16, 7-7, 7-12

filter-rate termination threshold4-9, 7-8

Flex filter

configuring5-7

definition5-2, 8-14

fragments8-17

H

home page, zone4-2

http8-17

HTTP policy template5-9

HTTP zombies8-26

hybrid8-10

I

icons4-11

information area1-5

in packet types6-8, 8-30

interactive operation mode4-8

interactive protection mode7-2

interactive protect mode7-2, 7-13

IP scan5-9, 8-17

IP threshold configuration6-17

L

land attack8-35

learning

accepting selectively6-22

phase 16-4

phase 26-5

policy construction6-4

threshold tuning6-5

zone traffic6-3

LINK templates4-7

M

main menu bar1-4

malformed packets8-10, 8-15, 8-22, 8-35

malicious-rate termination threshold4-9, 7-8

menu hierarchy1-6

mitigated attack8-21

action flow8-23

anomaly flow8-22

details8-24

type8-22

N

navigation pane1-5

new recommendations7-14

O

on-demand protection7-3

operation mode

automatic4-8

interactive4-8

other protocols

drop statistics8-33

policy template5-9

out_pkts packet types8-30

P

packets

dropped/bounced8-14

malformed8-15

packet type

auth6-8

in6-8

out_pkts8-30

pkts6-8, 8-30

reqs6-8

syns6-8

unauth_pkts6-8, 8-30

parameters

policy6-15

policy templates5-13

password, changing3-10

pending Dynamic filters4-5

accepting7-20

details7-20

fields7-19

viewing7-18

permit filter action5-5

pkts packet type6-8, 8-30

policy5-8, 6-2

action6-16

comparing6-19

configuring6-11

construction6-4

contructing6-2

key6-9

operation mode6-15

parameters6-15

removing service6-14

service6-7

statistics8-27

type6-8

policy template5-8, 6-2

configuring5-12

no proxy zones5-10

other_protocols5-9

parameters5-13

state5-13

port scan5-9, 8-17

privilege level

admin3-11

assigning3-11

changing3-12

config3-11

dynamic3-11

show3-11

user3-11

protection

activating7-3

deactivating7-4

on-demand7-3

verification7-4

protection-end time4-9

protection mode

automatic7-2

interactive7-2

R

rate-limiter8-14

Rate Limiter module5-6

ratio8-28

recommendations

accepting7-18

actions7-18

always accept7-18

always ignore7-18

deciding on7-17

fields7-15

filters timeout7-17

overview7-13

viewing new7-14

redirect/zombie7-7, 7-12

redirect/zombie filter action6-16

reqs packet type6-8, 8-30

S

show privilege level3-11

snapshot6-18

spoofed attack8-10, 8-22

spoofed packets8-15

src traffic characteristics6-9, 8-31

status icons4-11

status summary, zone4-5

strong filter action5-5, 6-16

syn_by_fin packet type8-30

syns packet types6-8, 8-30

system requirements1-1

T

TCP

detected anomalies8-17

drop statistics8-33, 8-34

policy templates5-9

template

policy5-8, 6-2

template, zone4-7

threshold

configuring IP threshold6-17

filter rate termination7-8

filter-rate termination4-9

malicious-rate termination4-9, 7-8

terminating tuning6-5

tuning6-2

to-user-filters6-16, 7-7, 7-12

traffic learning6-3

troubleshooting WBM connection2-3

tuning thresholds6-2, 6-5

type

detected anomaly8-17

mitigated attack8-22

policy6-8

U

UDP

policy template5-10

UDP drop statistics8-33

unauth_pkts packet type6-8, 8-30

User filter5-1

action5-5

configuring5-2

definition8-14

user interface1-3

users

adding3-10

changing password3-10

creating3-9

deleting3-10

managing authentication3-9

V

viewing

attack reports8-7, 8-11

counters8-1

diagnostics3-4

drop statistics8-32

Dynamic filters7-5

event log8-6

pending dynamic filters7-18

policy statistics8-27

recommendations7-15

suggested policies6-5

zone policies6-6

zone status7-4

W

WBM

enabling service2-2

setting up2-1

troubleshooting connection2-3

Z

zombie8-10, 8-22

detected8-26

list8-26

packet counter8-2

zone

attack reports8-11

configuring4-6

counters8-1

creating4-6

definition4-1

deleting4-10

event log8-6

home page4-2

icons4-11

operation mode4-8

policies6-6

reconfiguring4-10

status summary4-5

templates4-7