HP X Unified Security Platform View Filter Overrides and Custom Settings, Edit DV Filter Category Settings

IPS Digital Vaccine (DV) Filters

For details on viewing filters on the Filter List page, see the following topics:

•“View Filters with Recommended (Default) Settings” on page 29

•“View Filter Overrides and Custom Settings” on page 29

View Filters with Recommended (Default) Settings

STEP 1

STEP 2

STEP 3

STEP 4

On the LSM menu, select IPS > Security Profiles.

On the Security Profiles page, click the (edit) icon to edit the desired security profile.

On the Edit Security Profile page, if the Profile Details (Advanced) table is not visible, click Show Advanced Options.

In the Profile Details (Advanced) table, scroll down to the Filters section. You can click either View all filters or Search Filters.

•View all filters displays the Filters page. Because of the large number of filters, this action may take some time to execute.

If you select this option, the Search Filters page displays a list of the available IPS filters. You can sort the filters by filter name, control type, action, or state by clicking the appropriate column heading in the Filters List table. To specify new search criteria, use the search interface available at the top of the page.

•Search Filters displays the Search Filters page so you can specify filter search criteria and perform the search.

If you select this option, select the desired Search criteria. Then click Search. Note that the Search facility performs string searches. If you select Search Filters, the Search Filters page displays with only the search interface displayed. To locate filters, specify one or more search parameters. Then, click Search. Note that the search is a string search.

View Filter Overrides and Custom Settings

STEP 1

STEP 2

STEP 3

STEP 4

On the LSM menu, select IPS > Security Profiles.

On the Security Profiles page, click the Profile Name you want to edit.

On the Edit Security Profile page, if the Profile Details (Advanced) table is not visible, click Show Advanced Options.

In the Profile Details (Advanced) table, scroll down to the Filters section.

In the Filters section, the table lists all filters that have been added to the Profile.

STEP 5 To view and/or edit a filter, click the Filter Name.

If you want to remove the filter override and return the filter to its default, recommended settings, click the Delete icon.

Edit DV Filter Category Settings

By default, a Security Profile uses the Category Settings for all filters available in the Digital Vaccine package. In some cases you may not need a particular filter or category of filters. For example, you may want to disable filters that protect a particular type of web server against attack if that server is not

X Family LSM User’s Guide V 2.5.1 29