ZyWALL 5/35/70 Series User’s Guide

Figure 112 IDP: General

The following table describes the labels in this screen.

Table 76 IDP: General Setup

LABEL

DESCRIPTION

 

 

General Setup

 

 

 

Enable Intrusion

Select this check box to enable IDP on the ZyWALL. When this check box is

Detection and

cleared the ZyWALL is in IDP “bypass” mode and no IDP checking is done.

Protection

 

Turbo Card

This field displays whether or not a ZyWALL Turbo Card is installed.

 

Note: You cannot configure and save the IDP and Anti-Virus

 

screens if the ZyWALL Turbo Card is not installed.

Protected Interface

Select the Active check box to apply IDP to the corresponding interface. Traffic

 

going from the ZyWALL out through this interface is then checked against the

 

signature database for possible intrusions. For example, if you want to protect

 

the LAN computers from intrusions, select the LAN interface.

Apply

Click this button to save your changes back to the ZyWALL.

 

 

Reset

Click this button to begin configuring this screen afresh.

13.3 IDP Signatures

The rules that define how to identify and respond to intrusions are called “signatures”. Click IDP in the navigation panel and then click the Signatures tab to see the ZyWALL’s signatures.

13.3.1 Attack Types

Click IDP in the navigation panel and then select the Signatures tab. The Attack Type list box displays all intrusion types supported by the ZyWALL. Other covers all intrusion types not covered by other types listed.

Chapter 13 Configuring IDP

246