3.24. IDPRule
Description
An IDP Rule defines a filter for matching specific network traffic. When the filter criterion is met,
the IDP Rule Actions are evaluated and possible actions taken.
Properties
Index
The index of the object, starting at 1. (Identifier)
Name
Specifies a symbolic name for the rule. (Optional)
SourceInterface
Specifies the name of the receiving interface to be
compared to the received packet.
SourceNetwork
Specifies the sender span of IP addresses to be com-
pared to the received packet.
DestinationInterface
Specifies the the destination interface to be com-
pared to the received packet.
DestinationNetwork
Specifies the span of IP addresses to be compared to
the destination IP of the received packet.
Service
Specifies a service that will be used as a filter para-
meter when matching traffic with this rule.
Schedule
By adding a schedule to a rule, the security gateway
will only allow that rule to trigger at those desig-
nated times. (Optional)
InsertionEvasion
Protect against insertion/evastion attacks. (Default:
Yes)
URIIllegalUTF8
Specifies what action to take if invalid UTF-8 char-
acters are seen in a HTTP URI. (Default: Log)
URIIllegalHex
Specifies what action to take when invalid hexen-
coding (%xx) is seen in a HTTP URI. (Default:
DropLog)
URIDoubleEncode
Specifies what action to take when seeing double en-
coded characters in a HTTP URI. (Default: Ignore)
Comments
Text describing the current object. (Optional)
Note
If no Index is specified when creating an instance of this type, the object will be
placed last in the list and the Index will be equal to the length of the list.
3.24.1. IDPRuleAction
Description
3.24. IDPRule Chapter 3. Configuration Reference
117
To Next Page
Loading...
