2012

Intrusion Prevention scans all
the network traffic to and from
your computer and compares
this information against a set of
attack signatures. Attack
signatures contain the
information that identifies an
attacker's attempt to exploit a
known vulnerability in the
operating system or in a
program. If the information
matches an attack signature,
Intrusion Prevention blocks the
traffic from the suspicious
computer.
The following are some activities
that you can do using the
Intrusion Prevention options:
1 View the list of Intrusion
Prevention signatures.
1 Exclude individual signatures
from being monitored.
1 Specify whether or not you
must be notified when
Intrusion Prevention
signatures are detected.
1 Activate AutoBlock for a
specified duration to block
all incoming traffic from a
computer that continues to
attack your system.
1 View, restrict, or unblock the
list of computers that
AutoBlock blocks.
1 View or unblock the list of
computers that AutoBlock
blocks.
1 Determine whether or not
you are notified when
Intrusion Prevention
activities are detected.
437Customizing protection features
About customizing settings and options