ZyWALL IDP 10 User’s Guide
6-22
IDP
Policies
Table 6-6 User-defined Policies
LABEL
DESCRIPTION
Enable
Use this checkbox to enable or disable an individual user-defined rule without deleting it.
Clear this checkbox to have the ZyWALL skip this (user-defined) rule when detecting
intrusions.
Alarm
An alarm is an action (an e-mail is sent) to be taken on the policy when a packet
matches a rule. Alarm e-mails are not sent instantly but rather at periodic intervals
(minimum five minutes).
Select this checkbox to enable the alarm action. For other actions, select from the
Action
drop-down list box.
Type
Assign a signature category to your rule as described in
section 6.3.
Name
This is the rule name you configured for this intrusion type.
Direction
A policy rule direction refers to the intent of the policy rule.
o
Incoming
means the policy applies to traffic coming from the WAN to the LAN.
o
Outgoing
means the policy applies to traffic coming from the LAN to the WAN.
o
Bidirectional
means the policy applies to traffic coming from and going to either
direction.
Action
This field defines the action to be taken for a rule match. See
Table 6-2
for details on
actions. An alarm is also an action to be taken on the policy, but you must select the
Alarm
checkbox to have the ZyWALL send an alarm when a traffic flow matches a rule.
Note
This field displays your added description of the rule you configured.
Modify
You may edit or delete an individual rule using these icons. Click
to edit the rule or
click
to delete the rule. Before the rule is deleted, you will first see a confirmation
dialog box.
Summary of Contents for ZyXEL ZyWALL IDP 10
Page 1: ...ZyWALL IDP 10 Intrusion Detection Prevention Appliance User s Guide Version 1 July 2004 ...
Page 28: ......
Page 45: ...IDP III P Pa ar rt t I II II I IDP This part covers configuration of the IDP Policy screens ...
Page 46: ......
Page 60: ...ZyWALL IDP 10 User s Guide 6 14 IDP Policies Figure 6 13 Pre defined IDP Policies Summary ...
Page 106: ......
