WS-Management > WS-Management Class Reference > AMT Classes > AMT_HeuristicPacketFilterSettings
SUMMARY: NESTED | FIELD | | METHOD
DETAIL: FIELD | METHOD

Class AMT_HeuristicPacketFilterSettings

Used in features: System Defense & Heuristics
Compatible with the following Intel AMT Releases: 3.0, 3.2, 5.0, 5.1, 6.0, 6.1, 6.2, 7.0, 8.0 
CIM_ManagedElement
   extended by CIM_SettingData
      extended by AMT_HeuristicPacketFilterSettings


class AMT_HeuristicPacketFilterSettings
 extends CIM_SettingData


General Information:
Represents the system settings for the 
Heuristics System Defense feature

Product Specific 
Usage:
Instance is not created in Client Control mode. Disables 
Heuristics SystemDefense feature. 
Instance must define either a 
FastConnectionRateThreshold/FastConnectionRateClearTime pair or 
a 
SlowConnectionRateThreshold/SlowConnectionRateClearTime pair, but not both. 



Qualifiers:
-------------
Version=3.0.0









  
  

    Supported Fields 
      Summary

  

     string 
      
    ElementName 
The 
      user-friendly name for this instance of SettingData . . .

  

     string 
      
    InstanceID Key  
Within the scope of the instantiating Namespace, 
      InstanceID opaquely and uniquely identifies an instance of this class . . 
      .

  

     boolean 
      
    Enabled 
Indicates 
      whether or not Heuristics Packet Filter has been enabled.

  

     uint32 
      
    FastConnectionRateThreshold 
      
Specifies how many "fast connections" are permitted per unit of 
      time . . .

  

     uint32 
      
    FastConnectionRateClearTime 
      
If the clear time elapses without any further connections, the 
      counter is cleared and count begins from zero . . .

  

     uint32 
      
    SlowConnectionRateThreshold 
      
Specifies how many "slow connections" are permitted per unit of 
      time . . .

  

     uint32 
      
    SlowConnectionRateClearTime 
      
If the clear time elapses without any further connections, the 
      counter is cleared and count begins from zero . . .

  

     boolean 
      
    BlockAll 
Specifies 
      whether all transmit traffic should be blocked if one of the conditions 
      applies.

  

     boolean 
      
    BlockOffensivePort 
      
Specifies whether the offensive TX port should be blocked if 
      one of the conditions applies.

  

     uint16 
      
    EncounterTimeout 
      
A Timer value (in seconds) which defines the number of seconds 
      the Intel(R) AMT device will stay in "Encounter" mode (activating 
      configured actions) . . .




  
  

    Methods Summary

  

     
    Put(Instance) 
Changes 
      properties of the selected instance

  

     
    Get(Instance) 
Gets the 
      representation of the instance

  

     
    Pull(EnumerationContext, 
      MaxElements) 
Pulls instances of this class, following an 
      Enumerate operation

  

     
    Enumerate() 
      
Enumerates the instances of this class

  

     
    Release(EnumerationContext) 
      
Releases an enumeration context




  
  

    Field 
Detail


ElementName 
public string ElementName



  
General Information:
The user-friendly name for this instance of 
  SettingData. In addition, the user-friendly name can be used as an index 
  property for a search or query. (Note: The name does not have to be unique 
  within a namespace.)

Product Specific Usage:
In Intel AMT 
  Release 6.0 and later releases value is "Intel(r) AMT Heuristic System Defense 
  Settings"

Qualifiers:
-------------
Required
Override=ElementName
MaxLen=50


  

  





InstanceID Key 
public string InstanceID



  
General Information:
Within the scope of the instantiating 
  Namespace, InstanceID opaquely and uniquely identifies an instance of this 
  class. To ensure uniqueness within the NameSpace, the value of InstanceID 
  should be constructed using the following "preferred" algorithm: 
  
<OrgID>:<LocalID> 
Where <OrgID> and <LocalID> 
  are separated by a colon (:), and where <OrgID> must include a 
  copyrighted, trademarked, or otherwise unique name that is owned by the 
  business entity that is creating or defining the InstanceID or that is a 
  registered ID assigned to the business entity by a recognized global 
  authority. (This requirement is similar to the <Schema Name>_<Class 
  Name> structure of Schema class names.) In addition, to ensure uniqueness, 
  <OrgID> must not contain a colon (:). When using this algorithm, the 
  first colon to appear in InstanceID must appear between <OrgID> and 
  <LocalID>. 
<LocalID> is chosen by the business entity and 
  should not be reused to identify different underlying (real-world) elements. 
  If the above "preferred" algorithm is not used, the defining entity must 
  assure that the resulting InstanceID is not reused across any InstanceIDs 
  produced by this or other providers for the NameSpace of this instance. 
  
For DMTF-defined instances, the "preferred" algorithm must be used with 
  the <OrgID> set to CIM.

Product Specific Usage:
In 
  Intel AMT Release 6.0 and later releases value is "Intel(r) AMT NetworkPort %d 
  Heuristic Packet Filter Settings" where %d is the network interface 
  handle

Qualifiers:
-------------
Key
Override=InstanceID
MaxLen=70


  

  





Enabled 
public boolean Enabled



  
General Information:
Indicates whether or not Heuristics Packet 
  Filter has been enabled.

Product Specific Usage:
This field 
  can be used to enable/disable the Heuristics System Defense feature when using 
  Put, or to query the activation status when using 
  Get/Enumerate.

Qualifiers:
-------------
Required


  

  





FastConnectionRateThreshold 
public uint32 FastConnectionRateThreshold



  
General Information:
Specifies how many "fast connections" are 
  permitted per unit of time. Once the count reaches this value, the actions 
  specified in this object are taken. FastConnectionRateClearTime is used to 
  reset the count

  

  





FastConnectionRateClearTime 
public uint32 FastConnectionRateClearTime



  
General Information:
If the clear time elapses without any 
  further connections, the counter is cleared and count begins from zero. Clear 
  time is in units of milliseconds, and the permitted range is between 10 
  milliseconds to 1000 milliseconds.

  

  





SlowConnectionRateThreshold 
public uint32 SlowConnectionRateThreshold



  
General Information:
Specifies how many "slow connections" are 
  permitted per unit of time. Once the count reaches this value, the actions 
  specified in this object are taken. SlowConnectionRateClearTime is used to 
  reset the count.

Product Specific Usage:
Valid values: 
  1..256

  

  





SlowConnectionRateClearTime 
public uint32 SlowConnectionRateClearTime



  
General Information:
If the clear time elapses without any 
  further connections, the counter is cleared and count begins from zero. Clear 
  time is in units of seconds, and the permitted range is between one second to 
  50 seconds. This time is represented in milliseconds (1000-50000).

  

  





BlockAll 
public boolean BlockAll



  
General Information:
Specifies whether all transmit traffic 
  should be blocked if one of the conditions applies.

  

  





BlockOffensivePort 
public boolean BlockOffensivePort



  
General Information:
Specifies whether the offensive TX port 
  should be blocked if one of the conditions applies.

  

  





EncounterTimeout 
public uint16 EncounterTimeout



  
General Information:
A Timer value (in seconds) which defines 
  the number of seconds the Intel(R) AMT device will stay in "Encounter" mode 
  (activating configured actions). At the expiration of the timer value, the 
  Intel(R) AMT device will transition to "running" mode sending a "system clean" 
  alert. 0 has a special meaning - "Move to Encounter mode without time out 
  (permanent encounter)".

Product Specific Usage:
The minimal 
  value for EncounterTimeout in AMT is 20. 
A value of 0 signifies - "Move to 
  Encounter mode without time out (permanent 
  encounter)"

Qualifiers:
-------------
Required


  

  






  
  

    Method 
Detail


Put
public  Put([IN]AMT_HeuristicPacketFilterSettings Instance)



  
Permission Information:
Permitted realms: 
  ADMIN_SECURITY_CIRCUIT_BREAKER_REALM

General 
  Information:
Changes properties of the selected 
  instance

Product Specific Usage:
The following properties 
  must be included in any representation of AMT_HeuristicPacketFilterSettings: 
  

ElementName (cannot be modified) 
InstanceID (cannot be modified) 
  
Enabled 
EncounterTimeout 






Get
public  Get([OUT]AMT_HeuristicPacketFilterSettings Instance)



  
Permission Information:
Permitted realms: 
  ADMIN_SECURITY_CIRCUIT_BREAKER_REALM

General 
  Information:
Gets the representation of the instance





Pull
public  Pull([IN]String EnumerationContext, [IN]String MaxElements)



  
Permission Information:
All users permitted to use method, only 
  instances to whom the user has permissions will be returned

General 
  Information:
Pulls instances of this class, following an Enumerate 
  operation





Enumerate
public  Enumerate()



  
Permission Information:
All users permitted to use 
  method

General Information:
Enumerates the instances of this 
  class





Release
public  Release([IN]String EnumerationContext)



  
Permission Information:
All users permitted to use 
  method

General Information:
Releases an enumeration 
  context






  
  

    SUMMARY: NESTED | FIELD | METHOD
  

  

    DETAIL: FIELD | METHOD



  
  

    
      
Copyright © 2006-2012, Intel 
      Corporation. All rights 
reserved.