Intel AMT Features > System Defense > Use Cases > Set/Enable/Disable Heuristics Settings
CollapseAll image

Set/Enable/Disable Heuristics Settings


Heuristic settings are NOT supported by wireless interfaces.  Therefore, this feature is not available on LAN-less platforms.

The following steps describe how to set, enable, or disable the Heuristics settings of an Intel AMT system.

1.  Get the Heuristics settings of the Intel AMT system, as described in Get Heuristics Settings.

2.  Change the properties of AMT_HeuristicPacketFilterSettings as required.


   Ensure that you set the correct value for the Enabled property to enable/disable Heuristics.

   Disabling heuristic settings deletes the AMT_HeuristicsPacketFilterInterfacePolicy association.

3.  Invoke AMT_HeuristicPacketFilterSettings.put.

Click here for a snippet demonstrating this step

You can execute this snippet by inserting it into the execution template found here.


# $heuristicPacketFilterSettingsRef is an EPR to the AMT_HeuristicPacketFilterSettings object returned by the 'Get Heuristics Settings' use case.

$heuristicPacketFilterSettingsInstance = $heuristicPacketFilterSettingsRef.Get()

$heuristicPacketFilterSettingsInstance.SetProperty("Enabled", "true")

$heuristicPacketFilterSettingsInstance.SetProperty("FastConnectionRateThreshold", "100")

$heuristicPacketFilterSettingsInstance.SetProperty("FastConnectionRateClearTime", "100")

$heuristicPacketFilterSettingsInstance.SetProperty("BlockOffensivePort", "true")

$heuristicPacketFilterSettingsInstance.SetProperty("EncounterTimeout", "0")




Instance Diagram

Classes Used in This Flow

SDK Sample

Located at:<AMT SDK>\Windows\Intel_AMT\Samples\WS-Management\SystemDefense


See Also:

   Network Isolation

   System Defense Policies

   Heuristic Policies

   System Defense Filter Types

   Processing Network Packets with System Defense

   Networking Packet Structures

Copyright © 2006-2013, Intel Corporation. All rights reserved.