# Intelligent Defense Config

The intelligent defense function supports intelligent identification of false and missed preventions.

#### Context

Intelligent defense supports configuration through preset and user-defined rules.

#### Procedure

- Procedure of configuration through a preset rule
  1. Choose Defense > Defense Diagnostics > Intelligent Defense Config.
  2. On the Intelligent Defense Config tab, preset configuration rules are available. Click to the right of each preset rule.
  3. In the Edit Rule dialog box displayed, click the Associated Zone tab. Then click Add.
  4. In the Select Zone dialog box, select the check box before a Zone. You can select multiple Zones. Then click OK.
  5. In the Edit Rule dialog box, click Deployed.
- Procedure of configuration through a user-defined rule
  1. Choose Defense > Defense Diagnostics > Intelligent Defense Config.
  2. Click .
  3. In the Create Rule dialog box, click the Basic Information tab. Enter the rule name and description. Rule Name is mandatory, and Description is optional.
  4. Click the Rule for missed preventions tab and configure a rule for missed prevention.

     1. Click Edit Logic Rule.
     2. In the Edit Logic Rule dialog box displayed, select the Indicator and Comparator configuration information and enter the Fluctuation ratio configuration information.
     3. Select the check box before the logical group.
     4. Click to the right of Logical Relationship Definition.
     5. Click OK.

     You can configure either a missed prevention rule or a false prevention rule. You can continue to configure the current indicator type only after clearing the other indicator.

  5. Click the Rule for false preventions tab and configure a rule for false prevention.

     1. Click Edit Logic Rule.
     2. In the Edit Logic Rule dialog box displayed, select the Indicator and Comparator configuration information and enter the Fluctuation ratio configuration information.
     3. Select the check box before the logical group.
     4. Click to the right of Logical Relationship Definition.
     5. Click OK.

     You can configure either a missed prevention rule or a false prevention rule. You can continue to configure the current indicator type only after clearing the other indicator.

  6. In the Create Rule dialog box displayed, click the Associated Zone tab. Then click Add.
  7. In the Select Zone dialog box, select the check box before a Zone. You can select multiple Zones. Then click OK.
  8. In the Create Rule dialog box, click Deployed.

Parent topic: Configuring the Zone-based Defense Policy

Copyright © Huawei Technologies Co., Ltd.