Configuring Cyber Shield Traffic Filtering for Blocking Threats
In order to configure Cyber Shield to act as an Intrusion Prevention System (IPS) and drop traffic transiting CloudConnexa that matches certain threat signatures corresponding to different threat severity levels or threat categories, follow the steps below:
Navigate to the Shield page on CloudConnexa by clicking on Shield in the navigation bar.
On the Traffic Filtering widget, toggle the Monitoring switch to ON.
Click the pencil icon. The Traffic Filters priority setting will be displayed. Traffic matching specific threat signatures are classified into 4 levels according to the severity of the detected threat: Critical (Level 1), High (Level 2), and Medium (Level 3). We recommend blocking Critical (Level 1) traffic which blocks threats from malware, trojans, worms, and certain intrusion activity.
Select threat priority levels that should be blocked. Click the Save button if done with selecting priority levels.
If you want to block traffic by the category of the detected threat, then clear any priority settings and click on the Category tab. Note that blocking by either threat category or threat priority is possible not a combination of both.
The Traffic Filters category settings will be displayed. A single threat category can contain a mix of threats of different severity in terms of priority levels.
Select the threat categories to block.
Click the Save button.
