Anti spoofing filter. Presents the default anti spoofing policy filter

Default Policy Filter. Represents the default Else policy filter

Holds all the data required to create an ethernet filter.

an abstract class - base to all filters

This class is used to create User Filters

Describes the system capabilities of the System Defense feature. These capabilities are independent of all network interfaces.

Hold all the data required to create an IP filter

Describes the System Defense capabilities of a single network port.

Presents policy parameters

A default “Else” filter, for both receive and transmit directions, is available to catch all packets not matched to any of the policy filters.

Statistics of a policy’s operation on a specific interface

Holds all the data required to create a Protocol filter

an abstract class - base to all system filters

Holds all the data required to create a TCP filter

an abstract class to hold the common members of TCPFilter and UDPFilter

Holds all the data required to create a UDP filter

Present filter parameters, holds the common proprties for all filter types.

Provides interface to the system defense policies functionality

Provides interface to the system defense functionality

Anti Spoofing has the highest priority for blocking network traffic. Any packet that does NOT pass an anti-spoofing filter will not be transmitted even if it passes other filters. Any packet that does pass the anti-spoofing filter is subject to the rest of the system defense filters before it is transmitted. AntiSpoofingSupport.CountingAndEventOnMatch is supported in Intel AMT Release 6.0 and later releases.

Possible sources that can enable a system defense policy

Determines the filter’s Ethernet protocol.

The direction of the traffic to filter

The type/behavior of the filter.

Identifies which IP address in the packet header to filter.

Identifies which port in the packet header to filter.

IP protocols

The IP packet version

Enum for the network interface. Can be used as a bitmap in several functions. Other funtions support only one interface at a time.

TCP Flags