PortScanDetectionWellKnownPortsThreshold Property of the IFPCAttackDetection Interface

The PortScanDetectionWellKnownPortsThreshold property gets or sets the number of well-known ports that may be scanned before Forefront TMG generates an event when a port scan attack is detected.

A well-known port is any port in the range from 1 to 2048.

[C++]

HRESULT put_PortScanDetectionWellKnownPortsThreshold(
	long lWellKnownThreshold
);
HRESULT get_PortScanDetectionWellKnownPortsThreshold(
	long* plWellKnownThreshold
);

Parameters

plWellKnownThreshold: Pointer to a variable that on return receives a 32-bit integer specifying the number of well-known ports that may be scanned before Forefront TMG generates an event when a port scan attack is detected.
lWellKnownThreshold: A 32-bit integer that specifies the number of well-known ports that may be scanned before Forefront TMG generates an event when a port scan attack is detected.

Return Value

These property methods return S_OK if the call is successful; otherwise, they return an error code.

[Visual Basic]

Property PortScanDetectionWellKnownPortsThreshold As Long

Property Value

A 32-bit integer that specifies the number of well-known ports that may be scanned before Forefront TMG generates an event when a port scan attack is detected.

Remarks

This property is read/write. Its default value is 10, and its range of permissible values is from 1 to 2,048.

Port scan attacks can be detected only if the IntrusionDetectionEnabled property is set to True (VARIANT_TRUE in C++), and an event can be generated only if the PortScanDetectionEnabled property is set to True (VARIANT_TRUE in C++).

Requirements

Client	Requires Windows Vista or Windows XP.
Server	Requires Windows Server 2008.
Version	Requires Forefront Threat Management Gateway (TMG).
IDL	Declared in Msfpccom.idl.
DLL	Requires Msfpccom.dll.