Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
When IP blocking is enabled, check which source IP addresses have been blocked in policies related to intrusion prevention, web app protection, data leak protection, and botnet detection. It can also check which policies triggered the IP blocking and IP addresses manually added to the temporary blacklist. You can also set the lockout period. An IP address will be automatically unblocked after the lockout period expires. Administrators can perform the following operations on the temporary blacklist.
Operation
Description
Delete
Select the permanent blacklist that needs to be deleted. Then click Delete.
Clear All
Click Clear All to clear all addresses on the permanent blacklist.
Add to Global Blacklist
Add an address to the permanent blacklist. The communication to and from the said address will be permanently rejected.
Add to Whitelist
Add an address to the whitelist. Addresses that have been moved into the whitelist will not be blocked by Athena NGFW.
Logging Options
Click Logging Options to enable logging for the permanent blacklist, temporary blacklist, and whitelist modules as needed.[sa4]
Refresh interval
Set the refresh interval of the temporary blacklist, including four options: never, 5 seconds, 10 seconds, 20 seconds, and 30 seconds. Alternatively, define a custom interval based on your needs.
Search
You can search for a specific address.
Table 8:Temporary Blacklist Operation Options
Click Add. Select the Lockout Range, Address Type, Type, IP address, and LockoutDuration. Then, click Save.
Address Type: Select the address type to be blocked, including IP address, domain name, and URL.
• IP Address: Enter the source IP or destination IP.
• Domain Name: Enter the domain name to be blocked.
• URL: Enter the URL to be blocked.
Lockout Duration: Set the lockout duration, which must be 3 minutes to 15 days, so that the blocked list will be unblocked once the duration expires.
Click Set Lockout Duration. On the displayed Set Lockout Duration page, set the lockout duration for IP blocking.