Utilizing device response ports enables your device to send preset responses (enabled in policy configuration), such as a TCP reset, as well as post-detection responses, such as firewall blocking of traffic, upon detection of malicious traffic. The device response ports are most commonly used with an external tap operating configuration. The other operating modes allow responses to be injected back through the interface ports. Since responses cannot be injected into a segment through an external tap, response port configuration is necessary.
Go to Devices → <Admin Domain Name> → Devices → <Device_Name> → Setup → Physical Ports.
Click on the Response Ports tab.
Double-click on the row of the response port to be configured. The Response Port Details window is displayed.
Configure Response Port window.png "GUID-E4CE94E1-1234-4762-9DB1-938C2B5B7ED1-low.png")
Select a Speed (Duplex). The following are the supported options for NS-series Sensor models.
NS-series:
Auto-Negotiate
1 Gbps
10 Gbps
Select the State as either Enabled (On) or Disabled (Off). For example, you need to disable the port if you connect a new wire, then enable it after re-connection.
Select the network component the response port connects to (Connected To): either a Switch or a Router.
If you select Router, in the Virtual MAC Address type the MAC address of the router to which you are connecting. The MAC address cannot be the broadcast address "ff:ff:ff:ff:ff:ff."
Click Save to save your port changes.