Fortinet Network Device IPS User Manual
Page 41
IPS sensors
Configuring IPS sensors
FortiGate IPS User Guide Version 3.0 MR7
01-30007-0080-20080916
41
To view an IPS sensor, go to Intrusion Protection > IPS Sensor and select the
Edit icon of any IPS sensor. The Edit IPS Sensor window is divided into three
parts: the sensor attributes, the filters, and the overrides.
Figure 9: Edit IPS sensor
IPS sensor attributes:
IPS sensor filters:
Name
The name of the IPS sensor. You can change it at any time.
Comments
An optional comment describing the IPS sensor. You can change it at
any time.
OK
Select to save changes to Name or Comments.
Add Filter
Add a new filter to the end of the filter list. For more information, see
“Configuring filters” on page 42
.
#
Current position of each filter in the list.
Name
The name of the filter.
Signature
attributes
Signature attributes specify the type of network traffic the signature
applies to.
Severity
The severity of the included signatures.
Target
The type of system targeted by the attack. The targets
are client and server.
Protocol
The protocols to which the signatures apply. Examples
include HTTP, POP3, H323, and DNS.
OS
The operating systems to which the signatures apply.
Application The applications to which the signatures apply.
Enable
The status of the signatures included in the filter. The signatures can be
set to enabled, disabled, or default. The default setting uses the default
status of each individual signature as displayed in the signature list.
Logging
The logging status of the signatures included in the filter. Logging can
be set to enabled, disabled, or default. The default setting uses the
default status of each individual signature as displayed in the signature
list.
Action
The action of the signatures included in the filter. The action can be set
to pass all, block all, reset all, or default. The default setting uses the
action of each individual signature as displayed in the signature list.
Count
The number of signatures included in the filter. Overrides are not
included in this total.
Delete icon
Delete the filter.
Edit icon
Edit the filter.
Insert icon
Create a new filter and insert it above the current filter.