Security Analysis Settings

This part is only available when you are using the Security analysis profile, where you can set and change the criteria for the items to detect the provided security problems. This module gives you the direct results of the attacks and malicious activities instead of throwing you a large group of data requiring you to figure out where comes the problem.

You can read Analysis Profile to learn how to open this window.

To disable any of the security analysis item, just uncheck the check box on its  group title.

At present, Security Analysis is able to detect the following types of malicious activities:

• Worm: detects suspicious worm activities.
• TCP Port Scan: detects the TCP port scanning activities.
• ARP Attack: detects ARP attacks like ARP scanning, ARP spoofing, ARP too many unrequested response.
• Suspicious Conversation: detects the suspicious conversations of HTTP, FTP, SMTP and POP3.
• DoS Attacking: detects the compromised computers in your network joining in an DoS attack.
• DoS Attacked: detects the stations in your network under a DoS attack.