Chapter 34 IDP

Table 155 IDP Service Groups (continued)

SQL

SNMP

SMTP

RSERVICES

 

 

 

 

RPC

POP3

POP2

P2P

 

 

 

 

ORACLE

NNTP

NETBIOS

MYSQL

 

 

 

 

MISC_EXPLOIT

MISC_DDOS

MISC_BACKDOOR

MISC

 

 

 

 

IMAP

IM

ICMP

FTP

 

 

 

 

FINGER

DNS

 

 

 

 

 

 

The following figure shows the WEB_PHP service group that contains signatures related to attacks on web servers using PHP exploits. PHP (PHP: Hypertext Preprocessor) is a server-side HTML embedded scripting language that allows web developers to build dynamic websites.

Logs and actions applied to a service group apply to all signatures within that group. If you select original setting for service group logs and/or actions, all signatures within that group are returned to their last-saved settings.

Figure 407 Configuration > Anti-X > IDP > Profile > Edit > IDP Service Group

34.6.4 Profile > Query View Screen

Click Switch to query view in the screen as shown in Figure 406 on page 571 to go to a signature query screen. In the query view screen, you can search for

576

 

ZyWALL USG 2000 User’s Guide