What kind of event is detected by AiShield as a Warning event?

Zyxel_Support

When AiShield detected a warning event, the traffic still can pass through and the threat event is recorded in the App.

IPS (Intrusion Prevention System) Low event

IPS event includes Critical/High/Medium/Low severity levels. The severity level is based on severity scores for CVE Entries which are provided by the U.S. National Vulnerability Database (NVD).

The IPS event types are shown below:

• Denial-of-service (DoS)
• Unauthorized-access
  
• Web-attack
  
• Trojan-activity
  
• Shellcode-detect
  
• Reconnaissance
  
• Protocol-vulnerability-attack
  
• Exploit
  
• CryptoHijacking

IP Reputation event

From WAN to LAN traffic
When the following IP Reputation event is detected and the traffic is from WAN side:

• Scanners
• Proxy
  
• Tor Proxy
  

From LAN to WAN traffic
When the following IP Reputation event is detected and the traffic is from LAN side:

• Spam Sources
• Windows Exploits
  
• Web Attacks
  
• BotNets
  
• Scanners
  
• Denial of Service
  
• Reputation
  
• Phishing
  
• Proxy
  
• Mobile Threats
  
• Tor Proxy