C613-50631-01 Rev A Command Reference for IE340 Series 2776
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
AMF AND AMF PLUS COMMANDS
APPLICATION
-PROXY THREAT-PROTECTION
application-proxy threat-protection
Overview Use this command to set the blocking action to take when a threat detected
message is received from an AMF Security (AMF-Sec) Controller.
Use the no variant of this command to disable threat protection blocking actions
on the port.
Syntax
application-proxy threat-protection
{drop|link-down|quarantine|log-only}
no application-proxy threat-protection
Default Threat protection is disabled by default.
Mode Interface Configuration
Example To set the threat protection blocking action on port1.0.4 to drop, use the
commands:
awplus# configure terminal
awplus(config)# interface port1.0.4
awplus(config-if)# application-proxy threat-protection drop
To disable threat protection blocking actions on port1.0.4, use the commands:
awplus# configure terminal
awplus(config)# interface port1.0.4
awplus(config-if)# no application-proxy threat-protection
Related
commands
application-proxy quarantine-vlan
application-proxy threat-protection send-summary
clear application-proxy threat-protection
service atmf-application-proxy
show application-proxy threat-protection
Parameter Description
drop Drop the traffic that generates the threat reports. This is a Layer 2
drop. Note that the device will only drop packets that arrive at the
port, not packets sent from the port.
link-down Take the link down in response to threats, by setting it to error
disabled.
quarantine Move the offending port to a quarantine VLAN.
log-only Log when a threat is detected.