Configuration of IP sweep attack defense for the USG6000 series on the web UI

You can configure port scan attack defense for the USG6000 series on the web UI.
1. Choose Policy > Security Protection > Attack Defense.
2. Click the Single-Packet Attack tab.
3. Select the IP Sweep check box to enable the attack defense function.
4. Set the maximum scanning rate and blacklist aging time.
If you enable IP sweep attack defense, enable the blacklist function as well to ensure that the device discards blacklisted packets.

Scroll to top