3.26. IDPRule
Description
An IDP Rule defines a filter for matching specific network traffic. When the filter criterion is met,
the IDP Rule Actions are evaluated and possible actions taken.
Properties
Index
The index of the object, starting at 1. (Identifier)
Name
Specifies a symbolic name for the rule. (Optional)
SourceInterface
Specifies the name of the receiving interface to be compared to
the received packet.
SourceNetwork
Specifies the sender span of IP addresses to be compared to the re-
ceived packet.
DestinationInterface
Specifies the the destination interface to be compared to the re-
ceived packet.
DestinationNetwork
Specifies the span of IP addresses to be compared to the destina-
tion IP of the received packet.
Service
Specifies a service that will be used as a filter parameter when
matching traffic with this rule.
Schedule
By adding a schedule to a rule, the security gateway will only al-
low that rule to trigger at those designated times. (Optional)
InsertionEvasion
Protect against insertion/evastion attacks. (Default: Yes)
URIIllegalUTF8
Specifies what action to take if invalid UTF-8 characters are seen
in a HTTP URI. (Default: Log)
URIIllegalHex
Specifies what action to take when invalid hexencoding (%xx) is
seen in a HTTP URI. (Default: DropLog)
URIDoubleEncode
Specifies what action to take when seeing double encoded charac-
ters in a HTTP URI. (Default: Ignore)
Comments
Text describing the current object. (Optional)
Note
If no
Index
is specified when creating an instance of this type, the object will be
placed last in the list and the
Index
will be equal to the length of the list.
3.26.1. IDPRuleAction
Description
An IDP Rule Action specifies what signatures to search for in the network traffic, and what action to
take if those signatures are found.
3.26. IDPRule
Chapter 3. Configuration Reference
128
