IPS Digital Vaccine (DV) Filters

Filter Override Settings

For the best system performance, we recommend that you use global Category Settings and the Recommended action set for all DV filters. However, in some cases, you may need to override the category settings and recommended action for individual filters due to specific network requirements, or in cases where the recommended settings for a filter interact poorly with your network.

Filter override settings specify custom settings to be applied to the filter in the Security Profile. Once a filter has been customized, it is not affected by the global Category Settings that specify the filter State and Action. For details, see “Edit Individual Filter Settings” on page 32.

Configuring DV Filters

You configure filters separately for each Security Profile configured on the X family device. When a profile is initially created, all filters are set to the default Category Settings. You can change the Category Settings for filters or edit individual filters from the Edit Security Profile page in the LSM.

Because of the large number of DV filters available on the device, the LSM provides a search interface to view and edit filters. For instructions on using this interface and on editing filters, see the following topics:

“View DV Filters” on page 26

“Edit DV Filter Category Settings” on page 29

o“Edit Category Settings for a Filter Group” on page 30

o“Edit Individual Filter Settings” on page 32

o“Configure Filter Limits/Exceptions based on IP Address” on page 34

o“Edit a Port Scan/Host Sweep Filter” on page 36

“Reset an Individual Filter” on page 35

X Family LSM User’s Guide V 2.5.1

25