DefensePro User Guide
Security Configuration
Document ID: RDWR-DP-V0602_UG1201
151
3. To add a rule:
a. In the rules table, right-click and select, Add New Signature Profile.
b. Enter a profile name, and select an attribute and its value.
c. Click OK. The new rule is displayed in the rule table. You can now add more attributes to the
rule, and add more values to existing rule attributes.
4. To add an attribute to an existing rule:
a. In the rules table, right-click the rule, and select Add Attribute Type.
b. Select an attribute and its value.
c. Click OK. The new attribute is displayed in the rule.
5. To add a value to an existing rule attribute:
a. In the rules table, right-click the rule attribute, and select Add Attribute Value.
b. Select a value for the attribute.
c. Click OK. The new attribute value is displayed in the rule.
6. To save the signature profile configuration, click OK.
Configuring Signature Protection Signatures
A signature is a building block of the protection profile. Each signature contains one or more
protection filters and attributes that determine which packets are malicious and how they are
treated.
Signature settings parameters define how malicious packets are tracked and treated once their
signature is recognized in the traffic. Each attack is bound to a “tracking” function that defines how
the packet is handled when it is matched with a signature. The main purpose of these functions is to
determine whether the packet is harmful and to apply an appropriate action.
Table 78: Signature Profile Parameters
Parameter
Description
Profile Name
The name of the signature profile. For a new profile, enter a profile
name.
Show Matching Signatures
This button appears only when editing a profile. Click to display the
list of signatures associated with the configured protections for the
profile.
Signature Profile Rules Table
The table displays details of the configured rules for the selected profile. Each rule can contain
more than one attribute type, and each attribute type can contain one or more attribute values.
Rule Name
The name of the signature profile rule.
Note:
This field is read-only when adding an attribute type or
attribute value.
Attribute Type
Select from the list of predefined attribute types, which are based
on the various aspects taken into consideration when defining a
new attack.
Attribute Value
Select the value for the defined attribute type.
Summary of Contents for DefensePro 6.02
Page 1: ...DefensePro User Guide Software Version 6 02 Document ID RDWR DP V0602_UG1201 January 2012 ...
Page 2: ...DefensePro User Guide 2 Document ID RDWR DP V0602_UG1201 ...
Page 20: ...DefensePro User Guide 20 Document ID RDWR DP V0602_UG1201 ...
Page 28: ...DefensePro User Guide Table of Contents 28 Document ID RDWR DP V0602_UG1201 ...
Page 116: ...DefensePro User Guide Device Network Configuration 116 Document ID RDWR DP V0602_UG1201 ...
Page 302: ...DefensePro User Guide Real Time Security Reporting 302 Document ID RDWR DP V0602_UG1201 ...
Page 308: ...DefensePro User Guide Administering DefensePro 308 Document ID RDWR DP V0602_UG1201 ...
Page 324: ...DefensePro User Guide Troubleshooting 324 Document ID RDWR DP V0602_UG1201 ...
