Microsoft Internet Security and Acceleration Server 2000

FPCIpPacketFilters Collection

The FPCIpPacketFilters collection provides access to a group of IP packet filter objects in an ISA array. An IP packet filter monitors all network traffic to determine whether the packets can be communicated. If the packet passes through the filter, the data is then passed up to the application layer. An individual IP packet filter is either an allowing or blocking filter. Allowing filters permit communication between specified IP addresses by using the specified protocols and ports. Blocking filters block communication between specified IP addresses by using the specified protocols and ports.

This collection is a property of an FPCArrayPolicy object.

Click here to see the ISA object hierarchy.

Note to C++ Programmers

This collection implements the IFPCIpPacketFilters interface.

Methods

The following table lists the methods of the FPCIpPacketFilters collection.

Method Description
Add Creates a new FPCIpPacketFilter object in the collection and returns a reference to it.
Item Retrieves the given FPCIpPacketFilter object from the collection.
Refresh Reads the collection's configuration information from persistent storage, discarding any changes to the configuration that were not saved.
Remove Removes an IP packet filter object from the collection.
Save Saves the object's configuration to persistent storage.

Properties

The following table lists the properties of the FPCIpPacketFilters collection.

Property Description
Count Gets the number of FPCIpPacketFilter objects in the collection.
Enabled Gets or sets whether IP packet filtering is enabled.
EnablePPTP Gets or sets whether Point-to-Point Tunneling (PPTP) is enabled.
IntrusionDetectionEnabled Gets or sets whether the Intrusion Detection setting is enabled.
IpFragmentsFilteringEnabled Gets or sets whether IP fragment filters are enabled.
IpHalfScanDetectionEnabled Gets or sets whether Internet Protocol (IP) half-scan attacks are detected and generate an event.
IpOptionPacketFilteringEnabled Gets or sets whether IP packet filters are enabled.
IpRoutingEnabled Gets or sets whether Internet Protocol (IP) routing is enabled.
LandAttackDetectionEnabled Gets or sets whether land attacks are detected and generate an event.
LogPacketsFromAllowFilters Gets or sets whether packets from allow filters are logged.
PingOfDeathDetectionEnabled Gets or sets whether ping-of-death attacks are detected and generate an event.
PortScanDetectionAllPortsThreshold Gets or sets, if detection of port scan attacks is enabled, the total number of ports that can be scanned before ISA generates an alert.
PortScanDetectionEnabled Gets or sets whether port scan attacks are detected and generate an event.
PortScanDetectionWellKnownPortsThreshold If detection of port scan attacks is enabled, this property gets or sets the total number of well-known ports that can be scanned before ISA generates an alert.
UdpBombDetectionEnabled Gets or sets whether User Datagram Protocol (UDP) bomb attacks are detected and generate an event.
VendorParametersSets Gets a reference to an object for storing and loading of custom data into the FPCIpPacketFilters collection's storage.
WinOutOfBandDetectionEnabled Gets or sets whether Windows out-of-band attacks are detected and generate an event.

Requirements

  Windows NT/2000: Requires Windows 2000.
  Version: Requires ISA Server 2000.
  Header: Msfpccom.idl.