H3C Technologies H3C SecBlade IPS Cards - Manual (Page 122)

14-9
Figure 14-9 Policy application page
Table 14-5 describes the configuration items for applying an IPS policy to a segment.
Table 14-5 Configuration items for applying an IPS policy to a segment
Item Description
Segment
Select the ID of the segment to which you want to apply the IPS policy.
Available segments are those configured on the page you enter by selecting
System Management > Network Management > Segment Configuration.
Policy Select the IPS policy to be applied.
Direction Apply the policy to the inbound direction, outbound direction, or both.
IP addresses
Internal
Zone
Excluded IP
addresses
Specify the IP addresses to apply the policy to in the internal zone. The policy will
apply to all IP addresses that are in the IP addresses list but not in the Excluded
IP addressed list.
The excluded IP addresses must be included on the IP Addresses list.
If you leave the lists blank, the policy applies to all IP addresses in the internal
zone.
z On a T1000 series IPS device, you can configure up to 10 IP addresses for
the IP Addresses list and Excluded IP addresses list respectively.
z On a T200 series IPS device, you can configure up to 256 IP addresses for
the IP Addresses list and Excluded IP addresses list respectively.