Chapter 38 IDP
ZyWALL USG Series User’s Guide
721
38.2.4 Add Profile > Query View
In the group view screen, click
Switch to query view
to search for signatures by criteria such as Name, ID,
Severity, Policy Type, Platform, Service, Platforms, or actions.
Log
To edit an item’s log option, select it and use the
Log
icon. These are the log options:
no
: Select this option on an individual signature or a complete service group to have the Zyxel
Device create no log when a packet matches a signature(s).
log
: Select this option on an individual signature or a complete service group to have the Zyxel
Device create a log when a packet matches a signature(s).
log alert
: An alert is an e-mailed log for more serious events that may need more immediate
attention. Select this option to have the Zyxel Device send an alert when a packet matches a
signature(s).
Action
To edit what action the Zyxel Device takes when a packet matches a signature, select the
signature and use the
Action
icon.
none
: Select this action on an individual signature or a complete service group to have the
Zyxel Device take no action when a packet matches the signature(s).
drop
: Select this action on an individual signature or a complete service group to have the
Zyxel Device silently drop a packet that matches the signature(s). Neither sender nor receiver
are notified.
reject-sender
: Select this action on an individual signature or a complete service group to have
the Zyxel Device send a reset to the sender when a packet matches the signature. If it is a TCP
attack packet, the Zyxel Device will send a packet with a ‘RST’ flag. If it is an ICMP or UDP
attack packet, the Zyxel Device will send an ICMP unreachable packet.
reject-receiver
: Select this action on an individual signature or a complete service group to
have the Zyxel Device send a reset to the receiver when a packet matches the signature. If it is
a TCP attack packet, the Zyxel Device will send a packet with an a ‘RST’ flag. If it is an ICMP or
UDP attack packet, the Zyxel Device will do nothing.
reject-both
: Select this action on an individual signature or a complete service group to have
the Zyxel Device send a reset to both the sender and receiver when a packet matches the
signature. If it is a TCP attack packet, the Zyxel Device will send a packet with a ‘RST’ flag to the
receiver and sender. If it is an ICMP or UDP attack packet, the Zyxel Device will send an ICMP
unreachable packet.
#
This is the entry’s index number in the list.
Status
The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is
inactive.
SID
Type the exact signature ID (identification) number that uniquely identifies a Zyxel Device IDP
signature.
Log
These are the log options. To edit this, select an item and use the
Log
icon.
Action
This is the action the Zyxel Device should take when a packet matches a signature here. To edit
this, select an item and use the
Action
icon.
OK
A profile consists of three separate screens. If you want to configure just one screen for an IDP
profile, click
OK
to save your settings to the Zyxel Device, complete the profile and return to the
profile summary page.
Cancel
Click
Cancel
to return to the profile summary page without saving any changes.
Save
If you want to configure more than one screen for an IDP profile, click
Save
to save the
configuration to the Zyxel Device, but remain in the same page. You may then go to another
profile screen (tab) in order to complete the profile. Click
OK
in the final profile screen to
complete the profile.
Table 260 Configuration > UTM Profile> IDP > Profile > Add > Group View (continued)
LABEL
DESCRIPTION
Summary of Contents for USG110
Page 27: ...27 PART I User s Guide ...
Page 195: ...195 PART II Technical Reference ...
Page 309: ...Chapter 10 Interfaces ZyWALL USG Series User s Guide 309 ...
Page 313: ...Chapter 10 Interfaces ZyWALL USG Series User s Guide 313 ...
Page 358: ...Chapter 10 Interfaces ZyWALL USG Series User s Guide 358 ...
Page 373: ...Chapter 10 Interfaces ZyWALL USG Series User s Guide 373 ...
