ZyXEL USG40HE Setup Guide - Page 6

Creating IDP Profile

Page 6 highlights

Creating IDP Profile From the web configuration screen go to Configuration  UTM Profile  IDP, click the Add button to insert a profile. You will be prompted to select a Base Profile.  NONE: All signatures are disabled. No logs are generated nor are actions taken.  ALL: All signatures are enabled. Signatures with a high or severe severity level (greater than three) generate log alerts and cause packets that trigger them to be dropped. Signatures with a very low, low or medium severity level (less than or equal to three) generate logs (not log alerts) and no action is taken on packets that trigger them.  WAN: Signatures for all services are enabled. Signatures with a medium, high or severe severity level (greater than two) generate logs (not log alerts) and no action is taken on packets that trigger them. Signatures with a very low or low severity level (less than or equal to two) are disabled.  LAN: This profile is most suitable for common LAN network services. Signatures for common services such as DNS, FTP, HTTP, ICMP, IM, IMAP, MISC, NETBIOS, P2P, POP3, RPC, RSERVICE, SMTP, SNMP, SQL, TELNET, TFTP, and MySQL are enabled. Signatures with a high or severe severity level (greater than three) generate logs (not log alerts) and cause packets that trigger them to be dropped. Signatures with a low or 6

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9

6
Creating IDP Profile
From the web configuration screen go to
Configuration
UTM Profile
IDP
, click the
Add
button to insert a profile.
You will be prompted to select a
Base Profile
.
NONE
:
All signatures are disabled. No logs are generated nor are actions taken.
ALL
:
All signatures are enabled. Signatures with a high or severe severity level (greater than three) generate log alerts and cause packets
that trigger them to be dropped. Signatures with a very low, low or medium severity level (less than or equal to three) generate logs (not log
alerts) and no action is taken on packets that trigger them.
WAN
:
Signatures for all services are enabled. Signatures with a medium, high or severe severity level (greater than two) generate logs (not
log alerts) and no action is taken on packets that trigger them. Signatures with a very low or low severity level (less than or equal to two) are
disabled.
LAN
:
This profile is most suitable for common LAN network services. Signatures for common services such as DNS, FTP, HTTP, ICMP, IM,
IMAP, MISC, NETBIOS, P2P, POP3, RPC, RSERVICE, SMTP, SNMP, SQL, TELNET, TFTP, and MySQL are enabled. Signatures with a high or severe
severity level (greater than three) generate logs (not log alerts) and cause packets that trigger them to be dropped. Signatures with a low or