Description

aSecurity supports blacklist management for attack protection or brute-force attack events and whitelist management for IP addresses, VMs, security policies, or threat events.

Prerequisites

N/A

Precautions

1. For the permanent blacklist, you can configure up to 2,048 items.
2. For the rule whitelist, you can configure up to 2,048 items.
3. For the VM/IP whitelist, you can configure up to 2,048 items.

Steps

1. On the Permanent Blacklist tab, add or remove source IP addresses related to attack protection events and remove those related to brute-force attack events as needed.

2. On the Rule Whitelist tab, add, remove, enable, or disable the enabled web vulnerability protection or IPS policies as needed.

3. On the VM/IP Whitelist tab, add or remove source IP addresses and destination IP addresses/VMs related to attack protection events and remove those related to brute-force attack events as needed.

4. On the File Whitelist tab, remove trusted threat events as needed, which will also remove files with the same MD5 value.