Fortinet FortiGate 4000 Benutzerhandbuch

NIDS attack prevention protects the FortiGate unit and the networks connected to it 
from common TCP, ICMP, UDP, and IP attacks. You can enable NIDS attack 
prevention to prevent a set of default attacks with default threshold values. You can 
also enable or disable and set the threshold values for individual attack prevention 
signatures.

•

•

•

Go to NIDS > Prevention.

Select the Enable Prevention check box, in the top left corner.

The NIDS Prevention module contains signatures that are designed to protect your 
network against attacks. Some signatures are enabled by default, others must be 
enabled. For a complete list of NIDS Prevention signatures and descriptions, see the 
FortiGate NIDS Guide.

Go to NIDS > Prevention.

Select the Enable check box beside each signature that you want to enable.

Select Check All 

 to enable all signatures in the NIDS attack prevention signature 

list.

Select Uncheck All 

 to disable all signatures in the NIDS attack prevention 

signature list.

Select Reset to Default Values 

 to enable only the default NIDS attack prevention 

signatures and return to the default threshold values.

Note: After the FortiGate unit reboots, NIDS attack prevention and synflood prevention are 
always disabled.