Cisco Cisco ASA 5555-X Adaptive Security Appliance 技术手册

Cisco

13

XML Examples for the Cisco Application Centric Infrastructure Security Device Package, Version 1.2(1)

Threat Detection

Threat Detection

This XML example sets up a basic threat detection rate for an ACL drop.

ASA Configuration

threat-detection rate acl-drop rate-interval 600 average-rate 0 burst-rate 0

XML Example (Basic Threat Detection)

<polUni>

<fvTenant name="tenant1">

<vnsLDevVip name="Firewall">

<vnsDevFolder key="BasicThreatDetection" name="BasicTD">

<vnsDevParam key="basic_threat" name="Basic1" value="enable"/>

<vnsDevFolder key="BasicThreatDetectionRateAclDrop" name="BasicTDACL">

<vnsDevParam key="rate_interval" name="ri1" value="600"/>

<vnsDevParam key="average_rate" name="ar1" value="0"/>

<vnsDevParam key="burst_rate" name="br1" value="0"/>

</vnsDevFolder>

</vnsDevFolder>

</vnsLDevVip>

</fvTenant>

</polUni>

XML Example (Scanning Threat Detection)

This XML example sets up the scanning threat detection rate.

ASA Configuration

threat-detection rate scanning-threat rate-interval 600 average-rate 100 burst-rate 40

threat-detection scanning-threat shun

<polUni>

<fvTenant name="tenant1">

<vnsLDevVip name="Firewall">

<vnsDevFolder key="ScanningThreatDetection" name="ScanTD1">

<vnsDevParam key="scanning_threat" name="Scan1" value="enable"/>

<vnsDevParam key="shun_status" name="Shun1" value="enable"/>

<vnsDevFolder key="ScanningThreatRate" name="ScanTDrate">

<vnsDevParam key="average_rate" name="ar1" value="100"/>

<vnsDevParam key="rate_interval" name="ri1" value="600"/>

<vnsDevParam key="burst_rate" name="br1" value="40"/>

</vnsDevFolder>

<vnsDevFolder key="ScanningThreatRate" name="ScanTDrate2">

<vnsDevParam key="average_rate" name="ar2" value="10"/>

<vnsDevParam key="rate_interval" name="ri2" value="660"/>

<vnsDevParam key="burst_rate" name="br2" value="20"/>

</vnsDevFolder>

</vnsDevFolder>

</vnsLDevVip>