Anomaly Detection Internal Zones

[adamgibs7]

Hello,

I have specified my corporate full IP subnet in internal zone, but i have not configured any TCP or UDP port for any destination also i have kept the default thresholds,

Is it necessary to configure  destination port for the TCP and UDP protocol.???????????????

Thanks

[interover]

Hi there,

No, not unless you have / want to configure specific thresholds per protocol.

[adamgibs7]

Hello,

Uptill now i m not facing any issues with IPS but i want IPS to monitor all the ports for the Internal zone so this is the reason i m asking that while configuring the Internal zone we have to mentioned specific port of tcp and udp for anomaly detection.

If i m not specifying any port than what does it monitor?? is it this incomplete configuration OR it monitors all the ports (1-65535)

Thanks