What Is the Security Baseline of CFW?
A security baseline is an initial list of IP addresses or domains that CFW creates by observing traffic access over a period of time. Users can maintain the baseline list by adding or removing IP addresses or domains based on security scores, associated security events, and network access, thereby forming the final security baseline.
After the security baseline is configured, any access from an IP address or domain outside the baseline triggers a security alarm. Users can handle the IP address or domain in the alarm list. The security baseline is suitable for traffic baseline protection during important periods.
Why Is the Baseline Detection Time Grayed Out and Unselectable?
You can view the task status of baseline scoring. When the task is in the baseline learning state, you cannot configure the baseline detection time.
Baseline learning time: statistical data collected from the time an IP address or domain is added to the baseline to the end time of the baseline.
Baseline detection time: statistical data collected from the time an IP address or domain is added to the baseline to the current time.