beautypg.com

Fortinet Network Device IPS User Manual

Page 41

background image

IPS sensors

Configuring IPS sensors

FortiGate IPS User Guide Version 3.0 MR7
01-30007-0080-20080916

41

To view an IPS sensor, go to Intrusion Protection > IPS Sensor and select the
Edit icon of any IPS sensor. The Edit IPS Sensor window is divided into three
parts: the sensor attributes, the filters, and the overrides.

Figure 9: Edit IPS sensor

IPS sensor attributes:

IPS sensor filters:

Name

The name of the IPS sensor. You can change it at any time.

Comments

An optional comment describing the IPS sensor. You can change it at

any time.

OK

Select to save changes to Name or Comments.

Add Filter

Add a new filter to the end of the filter list. For more information, see

“Configuring filters” on page 42

.

#

Current position of each filter in the list.

Name

The name of the filter.

Signature
attributes

Signature attributes specify the type of network traffic the signature

applies to.

Severity

The severity of the included signatures.

Target

The type of system targeted by the attack. The targets

are client and server.

Protocol

The protocols to which the signatures apply. Examples

include HTTP, POP3, H323, and DNS.

OS

The operating systems to which the signatures apply.

Application The applications to which the signatures apply.

Enable

The status of the signatures included in the filter. The signatures can be

set to enabled, disabled, or default. The default setting uses the default

status of each individual signature as displayed in the signature list.

Logging

The logging status of the signatures included in the filter. Logging can

be set to enabled, disabled, or default. The default setting uses the

default status of each individual signature as displayed in the signature

list.

Action

The action of the signatures included in the filter. The action can be set

to pass all, block all, reset all, or default. The default setting uses the

action of each individual signature as displayed in the signature list.

Count

The number of signatures included in the filter. Overrides are not

included in this total.

Delete icon

Delete the filter.

Edit icon

Edit the filter.

Insert icon

Create a new filter and insert it above the current filter.