Operational Mode - Protected

When a traffic baseline is learned, detection sensitivity can be quickly configured to address escalating traffic thresholds by running operational mode protect.

Perform the following steps to set the Protected mode for a zone:

1. Navigate to Configuration > Protected Objects > Zones.
2. Select a zone and click the Edit option available under the Actions column. The Zone Configuration page appears.

3. Expand the Overview section and select Protected from the Operational Mode drop-down list. The Indicators Thresholds page appears.

4. On the Indicators Thresholds page, the New Thresholds (All Services) and Threshold Source (Per Service) fields appear. Select the thresholds for the total traffic source.
5. In the Zone Esc. Score field, the score to filter the values is displayed.

Table 60 : Describes the information shown in the Protect page

Services	Description
New Threshold (All Services)	Displays the IP protocols and ports associated with service.
Indicator	Displays the indicator type for the selected service.
Learned Threshold	Displays the threshold values that are currently obtained from TPS detector or mitigator. Click the mitigator group link to view the learned indicator values for each mitigator. NOTE: If a zone is in learning state, the Refresh icon fetches the latest learned indicator values from the device.
Configured Threshold (Total Traffic)	Displays the existing threshold configurations that are defined in the zone service.
Indicator Score	Displays the score for each indicator and zone escalation.
Selected Threshold (Total Traffic)	Enter the indicator threshold values that correspond to the total traffic of the zone service. If a detector group is associated with this zone, these values are pushed to the TPS detector when you click Start Protection. From the sensitivity drop-down list, you can select: Low Sensitivity (5.0)—If traffic must exceed the baseline traffic rate. Traffic must exceed five times the baseline traffic rate to trigger mitigation. Medium Sensitivity (default) (3.0)—To create a balanced threshold. Traffic must exceed three times the baseline traffic rate to trigger mitigation. High Sensitivity (1.5)—To create a low threshold for traffic mitigation. Traffic must exceed one point five times the baseline traffic rate to trigger mitigation. Currently Configured Thresholds (Total Traffic)—To use the currently configured threshold defined for the zone service. NOTE: Indicators with selected threshold as 0 are not pushed to the device.
Selected Threshold (Per Device)	Displays the indicator threshold values per mitigator.

6. Click Save to start the protection.