Zone protection isnt blocking scan

[soporteseguridad]

Hi

We have created a zone protection profile for zones UNTRUST/DMZ/TRUST to prevent scan  but we have realised that this zone protection profile isnt working.

Why isnt blocking this scan??? we have the default values in the zone protection profiles....

I attach a screenshot about the scan

Thanks

[hyadavalli]

Hello,

Please make sure your zone protection looks like below and port scan will be blocked if threshold is met in the interval specified.

Regards,

Hari Yadavalli

[soporteseguridad]

Yes it configured like that. But the attach was to a range of our publics ips only  in 2 ports (80 and 443), it wasnt a portscan it was a scan in our public range.... zone protection should have recognise this like attack?? there is any way to prevent a scan in our public range ?

[hyadavalli]

In that case you can implement DoS protection.