What is the default value of IPS Signature Rate Based Settings?

[mmorcali]

Hi, 

I am trying to add ips signature and I want to know rate based settings default value. Does anyone know what the default value is?

[ozkanaltas]

Hello @mmorcali ,

The default value is the values you see in the action column.

[mmorcali]

Hi Özkan,

I think that is default action what you shared. Because when I click the specify button, I need to write threshold and seconds values. I think it should be a value like hit count.

[ozkanaltas]

Hi @mmorcali ,

Sorry, it's my fault. I confused it with the default in the action option.

The default rate value is 0 for all signatures.

This means that if you do not give a rate, the relevant signature rate base will not work and will block the relevant attack as soon as it sees it.

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/419589/ips-configuration-opt...

[mmorcali]

Hi @ozkanaltas 

Does the default rate value 0 means that action is taken when the signature is hit once?