https://docs.mitigator.ru/v26.06/en/tags/protection/ Recent content in Protection on BIFIT Mitigator Hugo -- gohugo.io en https://docs.mitigator.ru/v26.06/en/kb/quick-setup/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.06/en/kb/quick-setup/ The materials in this article are intended to facilitate understanding of the protection organizing basic principles using MITIGATOR. Below is an example of setting up the system in the first iteration. First, all packets are processed in “General Protection”, then 5-tuple routing rules distribute traffic to protection policies, and after the policies, the traffic returns to “General Protection” for the remaining countermeasures. Processing of back traffic from the protected resource is not considered in this article. https://docs.mitigator.ru/v26.06/en/kb/system-checklist/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.06/en/kb/system-checklist/ List of steps Set up network integration. Specify a license key and set limits. Set up interaction via BGP. Upload GeoIP databases into the system. Set up delivery channels for system event notifications. Set up notifications via syslog. Enable protection. (Optional) Upload logos and background images for various interface themes. (Optional) Select the interface theme type and graph display style. Details 1. Set up network integration. The configuration is performed independently for each instance of the system and is based on the composition of the network infrastructure and the tasks to be solved. https://docs.mitigator.ru/v26.06/en/kb/policy-checklist/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.06/en/kb/policy-checklist/ List of steps Make sure the routing rules for the policy are set. Configure the policy to display only the necessary countermeasures. Set up countermeasures. Set up automatic packet capture. Set up autodetection. (Optional) Check the effect on legitimate traffic via the test mode. Enable protection policy. (Optional) Configure the log analyzer. (Optional) Pin countermeasure graphs. Details 1. Make sure the routing rules for the policy are set. Make sure that the routing rules are set for the policy on the “Policy Setup” tab of the “Protection policy” page. https://docs.mitigator.ru/v26.06/en/kb/ss-feeds/ Mon, 01 Jan 0001 00:00:00 +0000 https://docs.mitigator.ru/v26.06/en/kb/ss-feeds/ The MITIGATOR team generates regularly updated reputational lists of IP addresses, autonomous systems and JA3 fingerprints (hereinafter referred to as “feeds”). Feeds can be imported into MITIGATOR as named lists and used in countermeasures and routing rules. To do this you need to specify Mitigator feeds as a source type. To do this, specify Mitigator feeds as the named list source type and select the required feed. Feeds cannot be downloaded or viewed, even through the MITIGATOR Web interface.