Microsoft Internet Security and Acceleration Server 2000 |
The FPCIpPacketFilters collection provides access to a group of IP packet filter objects in an ISA array. An IP packet filter monitors all network traffic to determine whether the packets can be communicated. If the packet passes through the filter, the data is then passed up to the application layer. An individual IP packet filter is either an allowing or blocking filter. Allowing filters permit communication between specified IP addresses by using the specified protocols and ports. Blocking filters block communication between specified IP addresses by using the specified protocols and ports.
This collection is a property of an FPCArrayPolicy object.
Click here to see the ISA object hierarchy.
This collection implements the IFPCIpPacketFilters interface.
The following table lists the methods of the FPCIpPacketFilters collection.
Method | Description |
---|---|
Add | Creates a new FPCIpPacketFilter object in the collection and returns a reference to it. |
Item | Retrieves the given FPCIpPacketFilter object from the collection. |
Refresh | Reads the collection's configuration information from persistent storage, discarding any changes to the configuration that were not saved. |
Remove | Removes an IP packet filter object from the collection. |
Save | Saves the object's configuration to persistent storage. |
The following table lists the properties of the FPCIpPacketFilters collection.
Property | Description |
---|---|
Count | Gets the number of FPCIpPacketFilter objects in the collection. |
Enabled | Gets or sets whether IP packet filtering is enabled. |
EnablePPTP | Gets or sets whether Point-to-Point Tunneling (PPTP) is enabled. |
IntrusionDetectionEnabled | Gets or sets whether the Intrusion Detection setting is enabled. |
IpFragmentsFilteringEnabled | Gets or sets whether IP fragment filters are enabled. |
IpHalfScanDetectionEnabled | Gets or sets whether Internet Protocol (IP) half-scan attacks are detected and generate an event. |
IpOptionPacketFilteringEnabled | Gets or sets whether IP packet filters are enabled. |
IpRoutingEnabled | Gets or sets whether Internet Protocol (IP) routing is enabled. |
LandAttackDetectionEnabled | Gets or sets whether land attacks are detected and generate an event. |
LogPacketsFromAllowFilters | Gets or sets whether packets from allow filters are logged. |
PingOfDeathDetectionEnabled | Gets or sets whether ping-of-death attacks are detected and generate an event. |
PortScanDetectionAllPortsThreshold | Gets or sets, if detection of port scan attacks is enabled, the total number of ports that can be scanned before ISA generates an alert. |
PortScanDetectionEnabled | Gets or sets whether port scan attacks are detected and generate an event. |
PortScanDetectionWellKnownPortsThreshold | If detection of port scan attacks is enabled, this property gets or sets the total number of well-known ports that can be scanned before ISA generates an alert. |
UdpBombDetectionEnabled | Gets or sets whether User Datagram Protocol (UDP) bomb attacks are detected and generate an event. |
VendorParametersSets | Gets a reference to an object for storing and loading of custom data into the FPCIpPacketFilters collection's storage. |
WinOutOfBandDetectionEnabled | Gets or sets whether Windows out-of-band attacks are detected and generate an event. |
Windows NT/2000: Requires Windows 2000.
Version: Requires ISA Server 2000.
Header: Msfpccom.idl.