It is all configurable in your $FWDIR/conf/cpmad_config.conf file. TP
JLTMN> Hi All, JLTMN> I am getting log messages about port scans on our outside segment. My understanding is that MAD blocks these attempts, and that you cannot turn this behaviour off. Is this true? What is the JLTMN> logic that is used to determine that a port scan is in progress? In other words, how many individual ports must be attempted, and at what frequency, before MAD will be triggered? JLTMN> Thanks, JLTMN> Jeff LaCoursiere JLTMN> Infrastructure Specialist JLTMN> T-Mobile JLTMN> ================================================= JLTMN> To set vacation, Out Of Office, or away messages, JLTMN> send an email to [EMAIL PROTECTED] JLTMN> in the BODY of the email add: JLTMN> set fw-1-mailinglist nomail JLTMN> ================================================= JLTMN> To unsubscribe from this mailing list, JLTMN> please see the instructions at JLTMN> http://www.checkpoint.com/services/mailing.html JLTMN> ================================================= JLTMN> If you have any questions on how to change your JLTMN> subscription options, email JLTMN> [EMAIL PROTECTED] JLTMN> ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
