Creating User Defined Filters

Supported Intel AMT Features > System Defense > Using the System Defense API > Creating and Applying System Defense Policies > Creating User Defined Filters

Creating User Defined Filters

User defined filters are created using the methods of the FilterFactory class.

For each of the user defined filters, you must define the following mandatory properties:

• name – A meaningful name for the filter (maximum length 16)

• filterDirection– The direction of the traffic to filter

• createEvent – Whether to create an event in the Event manager when a packet matches this filter

In addition, for each filter you must define ONE of the following:

• filterType – What the filter will do (see filterType)

-OR-

• eventsPerSecond – Maximum number of allowed packets per second (Rate Limit)

Note:

Because of the choice between filterType and evenstPerSecond, each FilterFactory class method is overloaded with at least two options. To define a Rate Limit filter, use the methods that do NOT include the filterType parameter. These methods automatically set the filterType to Rate Limit. For example:

CreateEthernetFilter (String, UInt32, FilterDirection, Boolean, UInt16)

Using a method with the filterType parameter set to “Rate Limit” will cause an exception.