Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Attack Description
Application
Defense violation
severe
Chapter 19: Auditing and Reporting
Auditing on the Sidewinder G2
Detects when severe attacks violate active policy defined
by Application Defenses, including spam filter reject and
keyword filter reject audits.
DOS all Detects Denial of Service attacks of all severities. This
attack category also detects all severities of TCP SYN
attacks and proxy flood attacks.
DOS severe Detects severe Denial of Service attacks. This attack
category also detects TCP SYN attacks and proxy flood
attacks. Severe attacks indicate something is occurring
that an administrator should know.
HA failover Detects when a failover IP address changes because a
High Availability cluster failed over to its secondary/
standby.
IPFilter deny Detects when a connection is denied by the active IP Filter
policy.
IPSEC error Detects when traffic generates IPSEC errors.
TCP SYN attack Detects a possible attempt to overrun the Sidewinder G2
with connection attempts.
Type Enforcement Detects when there is a TE violation due to an
unauthorized user or process attempting to perform an
illegal operation.
VPN Detects VPN audit events.
all audit Detects all attack and system events, regardless of type.
attack all Detects attack events of all severities. This option also
detects all severities of Application Defense violation
attacks, buffer overflow attacks, DOS attacks, general
attacks, policy violation attacks, protocol violation attacks,
and content security violation attacks.
attack severe Detects severe attacks. This option also detects
Application Defense violation attacks, buffer overflow
attacks, general attacks, DOS attacks, policy violation
attacks, protocol violation attacks, and content security
violation attacks. Severe attacks indicate something is
occurring that an administrator should know.
buffer overflow
attack
Detects attempted buffer overflow attacks targeted at
systems protected by the Sidewinder G2.
config change Detects when the Sidewinder G2’s configuration changes.
More...
541