Hi!

What made me wondering and reading the documentation of IPS during this task was the requirement that the host should be blocked after a detected port-scan for the duration of 5 minutes. My problem are the 5 minutes - as they are so specifically mentioned in the requirements, is there a way to configure this? I didn't really get an insight via the solution-guide, neither.

Thanks,
airflow