CIM Elements

The following table describes the CIM elements used to implement the System Defense feature.

Element Name

Description

Instance Creation**

Cardinality

Classes

AMT_GeneralSystemDefenseCapabilities

Describes the system capabilities of the System Defense feature. These capabilities are independent of all network interfaces.

Static

1

AMT_Hdr8021Filter

Represents an Ethernet level filter.

User

0 – X
where X is the maximum total number of filters according to the System Defense Capabilities

AMT_HeuristicPacketFilterSettings

Represents the system settings for the Heuristics System Defense feature.

Static

1

AMT_HeuristicPacketFilterStatistics

Represents the state of the Heuristics System Defense feature.

Static

1

AMT_IPHeadersFilter

Represents an IP level filter.

User

0 – X
where X is the maximum total number of filters according to the System Defense Capabilities

AMT_NetworkFilter

Represents a general network filter.

Implicit

2 – 3 per policy

AMT_NetworkPortSystemDefenseCapabilities

Describes the System Defense capabilities of a single network port.

Static

1 per CIM_EthernetPort

AMT_SystemDefensePolicy

Represents a System Defense Policy.

User

0 – 8

AMT_SystemDefenseService

Represents the System Defense and Heuristic Packet Filter service.

Static

1

Associations

AMT_ActiveFilterStatistics

Associates between AMT_FilterInSystemDefensePolicy and CIM_EthernetPort.

Implicit

0 – X

where X is the number of activated filters

AMT_FilterInSystemDefensePolicy

Associates between AMT_SystemDefensePolicy and the following:

     AMT_NetworkFilter

     AMT_IPHeadersFilter

     AMT_Hdr8021Filter

Implicit

0 – X

where X is the number of filters associated to system defense policies

AMT_HeuristicPacketFilterInterfacePolicy

Associates between AMT_SystemDefensePolicy and CIM_EthernetPort.

User

 1 per CIM_EthernetPort

AMT_NetworkPortSystemDefensePolicy

Associates between AMT_SystemDefensePolicy and CIM_EthernetPort.

User

1 per CIM_EthernetPort

AMT_NetworkPortDefaultSystemDefensePolicy

Associates between AMT_SystemDefensePolicy and CIM_EthernetPort.

User

1 per CIM_EthernetPort

AMT_SystemDefensePolicyInService

Associates between AMT_SystemDefensePolicy and AMT_SystemDefenseService.

Implicit

1 per policy

CIM_ElementCapabilities

Associates between AMT_NetworkPortSystemDefenseCapabilities and CIM_EthernetPort, and between AMT_GeneralSystemDefenseCapabilities and AMT_SystemDefencseService.

Static

Number of instances as the number of Capabilities classes and the number of CIM_EthernetPort classes

CIM_ElementSettingData

Associates between AMT_HeuristicPacketFilterSettings and CIM_EthernetPort.

Static

1

CIM_ElementStatisticalData

Associates between AMT_HeuristicPacketFilterStatistics and CIM_EthernetPort.

Static

1

CIM_HostedService

Associates between Intel AMT CIM_ComputerSystem and AMT_SystemDefenseService.

Static

1

** Instance Creation:

     Implicit: Instances created implicitly by Intel AMT in response to a user CIM operation

     Static: Instances created by Intel AMT on initialization

     User: The class supports create/delete

 

The following diagram illustrates the CIM elements used in the System Defense feature.

Copyright © 2006-2022, Intel Corporation. All rights reserved.