# Configuring the Zone-based Defense Policy (AntiDDoS)

After basic policies are configured, a basic attack defense policy is automatically generated on the devices associated with the Zone. You need to configure the attack defense policy based on live network traffic.

#### Prerequisites

The defense mode of the Zone has been configured. For details, see Configuring a Defense Mode.

#### Procedure

1. Choose Defense > Policy Settings > Zone.
2. Click of the Zone.
3. On the Inbound Defense Policy tab, click in the Operation column of the default defense policy starting with basic.

   The name of the default defense policy consists of basic and the IP address of the associated device. For example, if the IP address of the device is 10.18.60.36, the name of the default defense policy is basic_10_18_60_36.

4. Configure defense policies for protocols.
5. (Optional) If a Zone is associated with multiple devices, you can click the Defense Policy tab and then click to copy a defense policy from one associated device to another.

- TCP Defense Policy
  The defense policies for TCP services cover block, traffic limiting, and defense.
- UDP Defense Policy
  The defense policies for UDP services cover block, traffic limiting, and defense.
- ICMP Defense Policy
  The defense policies for ICMP services cover block, and rate limiting.
- Other Defense Policy
  The defense policies cover block, traffic limiting, and defense for services except the TCP, UDP, ICMP, DNS, SIP, HTTP, and HTTPS services.
- DNS Defense Policy
  The defense policies for DNS services transmitted over UDP cover traffic limiting, and defense.
- SIP Defense Policy
  The defense policies for SIP services.
- HTTP Defense Policy
  The defense policies for HTTP services cover defense.
- HTTPS Defense Policy
  The defense policies for HTTPS services cover defense.
- Top N Study
  After the top N study function is configured, you can view learning results, which act as policy parameters for tracing attack sources and confirming cleaning effects.

Parent topic: Configuring the Zone-based Defense Policy

Copyright © Huawei Technologies Co., Ltd.