D-Link DFL-260E CLI Guide for DFL-260E - Page 117
IDPRuleAction
View all D-Link DFL-260E manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 117 highlights
3.24. IDPRule Chapter 3. Configuration Reference 3.24. IDPRule Description An IDP Rule defines a filter for matching specific network traffic. When the filter criterion is met, the IDP Rule Actions are evaluated and possible actions taken. Properties Index Name SourceInterface SourceNetwork DestinationInterface DestinationNetwork Service Schedule InsertionEvasion URIIllegalUTF8 URIIllegalHex URIDoubleEncode Comments The index of the object, starting at 1. (Identifier) Specifies a symbolic name for the rule. (Optional) Specifies the name of the receiving interface to be compared to the received packet. Specifies the sender span of IP addresses to be compared to the received packet. Specifies the the destination interface to be compared to the received packet. Specifies the span of IP addresses to be compared to the destination IP of the received packet. Specifies a service that will be used as a filter parameter when matching traffic with this rule. By adding a schedule to a rule, the security gateway will only allow that rule to trigger at those designated times. (Optional) Protect against insertion/evastion attacks. (Default: Yes) Specifies what action to take if invalid UTF-8 characters are seen in a HTTP URI. (Default: Log) Specifies what action to take when invalid hexencoding (%xx) is seen in a HTTP URI. (Default: DropLog) Specifies what action to take when seeing double encoded characters in a HTTP URI. (Default: Ignore) Text describing the current object. (Optional) Note If no Index is specified when creating an instance of this type, the object will be placed last in the list and the Index will be equal to the length of the list. 3.24.1. IDPRuleAction Description 117