ZyXEL Vantage CNM User Guide - Page 186
Signature Update
View all ZyXEL Vantage CNM manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 186 highlights
Chapter 6 Device Security Settings Table 67 Device Operation > Device Configuration > Security > IDP > Anomaly TYPE DESCRIPTION Log Select the head of the Log column to generate logs for all rules included in an anomaly detection method. Select Log to generate a log when a match is found for the corresponding rule. Alert Select the head of the Alert column to activate the alert for all rules in an anomaly detection method. Select Alert to generate an alert log when a match is found for the corresponding rule. Action Select what the selected device should do when a packet matches a rule. No Action: The selected device takes no action when a packet matches the signature(s). Drop Packet: The packet is silently discarded. Drop Session: When the firewall is enabled, subsequent TCP/IP packets belonging to the same connection are dropped. Neither sender nor receiver are sent TCP RST packets. If the firewall is not enabled only the packet that matched the signature is dropped. Reset Sender: When the firewall is enabled, the TCP/IP connection is silently torn down. Just the sender is sent TCP RST packets. If the firewall is not enabled only the packet that matched the signature is dropped. Reset Receiver: When the firewall is enabled, the TCP/IP connection is silently torn down. Just the receiver is sent TCP RST packets. If the firewall is not enabled only the packet that matched the signature is dropped. Apply Reset Reset Both: When the firewall is enabled, the TCP/IP connection is silently torn down. Both sender and receiver are sent TCP RST packets. If the firewall is not enabled only the packet that matched the signature is dropped. Click this button to save your changes back to the device. Click this button to begin configuring this screen afresh. 6.10 Signature Update The device comes with built-in signatures created by the ZyXEL Security Response Team (ZSRT). These are regularly updated as new intrusions evolve. Use the Update screen to immediately download or schedule new signature downloads. Note: You should have already registered the device at myZyXEL.com (http:// www.myzyxel.com/myzyxel/) and also have either activated the trial license or standard license (iCard). If your license has expired, you will have to renew it before updates are allowed. 186 Vantage CNM User's Guide