A DoS profile is an analysis of network traffic with reference to the normal traffic flow captured during the learning period of a Sensor. A DoS Profile displays the current status of DoS learning mode policies applied to a Sensor, as well as its interfaces and subinterfaces. In DoS learning mode, a profile is built to determine a normal traffic pattern. Once this profile is learned, the Sensor alerts for traffic that is outside of the normal parameters. The profile is continually being built, thus baseline levels adjust over time.
The Manager displays the learning mode status values for the Sensor and each interface, respectively. This is particularly useful if you have changed policy application per interface and you want to determine if the new profile is being built or if it is actively detecting abnormal traffic conditions.
DoS profiles of the selected Sensor are displayed in the DoS Profiles page.
Note
DoS parameters are configured within each IPS policy or by creating a custom DoS policy at the interface or subinterface level.