beautypg.com

ZyXEL Communications 5 Series User Manual

Page 264

background image

ZyWALL 5/35/70 Series User’s Guide

264

Chapter 13 Configuring IDP

Search

Click this button to begin the search. The results display at the bottom of the
screen. Results may be spread over several pages depending on how broad the
search criteria selected were. The tighter the criteria selected, the fewer the
signatures returned.

Configure
Signatures

The results display in a table showing the criteria as selected in the search. Click a
column’s header to sort the entries by that attribute.

Go To Page

Navigate between pages of signatures found.

Name

The (read-only) signature name identifies a specific signature targeted at a specific
intrusion. Click the hyperlink for more detailed information on the intrusion.

ID

Each intrusion has a unique identification number. This number may be searched
at myZyXEL.com for more detailed information.

Severity

This field displays the level of threat that the intrusion may pose. See

Table 76 on

page 259

for more information on intrusion severity.

Platform

This field displays the computer or network device operating system that the
intrusion targets or is vulnerable to the intrusion. These icons represent a Windows
operating system, a UNIX-based operating system and a network device
respectively.

Active

Select the check box in the heading row to automatically select all check boxes
and enable all signatures.

Clear it to clear all entries and disable all signatures on the current page. For
example, you could clear all check boxes for signatures that targets operating
systems not in your network. This would speed up the IDP signature checking
process.

Alternatively, you may select or clear individual entries. The check box becomes
gray when you select the check box.

If you edited any of the check boxes in this column on the current page, use the
check box in the heading row to switch between the settings (last partial edited, all
selected and all cleared).

Log

Select this check box to have a log generated when a match is found for a
signature.

Select the check box in the heading row to automatically select all check boxes or
clear it to clear all entries on the current page.

Alternatively, you may select or clear individual entries. The check box becomes
gray when you select the check box.

If you edited any of the check boxes in this column on the current page, use the
check box in the heading row to switch between the settings (last partial edited, all
selected and all cleared).

Alert

You can only edit the Alert check box when the corresponding Log check box is
selected.

Select this check box to have an e-mail sent when a match is found for a signature.

Select the check box in the heading row to automatically select all check boxes or
clear it to clear all entries on the current page.

Alternatively, you may select or clear individual entries. The check box becomes
gray when you select the check box.

If you edited any of the check boxes in this column on the current page, use the
check box in the heading row to switch between the settings (last partial edited, all
selected and all cleared).

Action

You can change the default signature action here. See

Table 77 on page 260

for

more details on actions.

Table 79 SECURITY > IDP > Signature: Query View (continued)

LABEL

DESCRIPTION