Allied Telesis AR Series User Manual

C613-22104-00 REV B IP Reputation | Page 15
Feature Overview Advanced Network Protection
Figure 1: IP Reputation
AlliedWare Plus IP Reputation delivers accurate and robust scoring, ensuring that malicious IP
addresses are identified and strong local policies can be carried out with confidence.
AlliedWare Plus IP Reputation provides the following key features and benefits:
 Significantly enhances the ability of device to perform detection and intrusion prevention
 Advanced algorithm to reduce the number of false positives
 IP Reputation is disabled by default
 Supports the Emerging Threats’ ET Intelligence™ Rep List of IPv4 addresses, categories and
reputation scores provided by Proofpoint.
 Accurate and detailed information on 200,000+ IP addresses that have been identified as the
source of spam, viruses, and other malicious activity
 Over 30 IP Reputation categories
 Real-time threat analysis
 Checks both the source and destination IP addresses in the packet
 User configurable action for each IP Reputation category
 Alert action logs the packet and allows the packet to continue
 Drop action logs the packet and silently discards the packet
 Disable action ignores the IP Reputation category
 The default action for each category is alert
IP address A score: 30
IP address B score: 40
IP address C score: 20
Category: spammer
IP address A score: 30
IP address D score: 40
IP address E score: 20
Category: bot
IP address F score: 30
IP address D score: 15
IP address G score: 30
Category: spyware
UTM Device
Threat
Analysis
IP
Reputation
Database
1
2
3
Internet
IP address score
> Threshold
IP address score
Threshold
Action: Pass
4
<
5
Trafc
5
Downloaded&Updated to
Trafc Probes
Action: Alert (default),
Deny, Disable

Allied Telesis AR Series Specifications

General

Brand	Allied Telesis
Model	AR Series
Category	Firewall
Language	English