User Interface
R&S
®
GP-E/GP-S
98User Manual v16.2.1 ─ 01
If you modify the settings, click "Save" to store your changes or "Reset" to discard
them. Otherwise, click "Close" to shut the editor panel.
Click "
Activate" in the toolbar at the top of the desktop to apply your configuration
changes.
3.4.6.2 IPS/IDS Profiles
The Intrusion Prevention/Detection System (or »IPS/IDS«) maintains a database of
known threats to protect the computers on your network from a wide range of hostile
attack scenarios, generate alarms when any such threats are detected and terminate
communication from hostile sources.
The threat database consists of categories which include either intrusion detection sys-
tem (»IDS«) rules which allow you to monitor suspicious activities on the network or
intrusion prevention system (»IPS«) rules that detect real attacks. For detailed informa-
tion on these categories, see Emerging Threats FAQ.
For more detailed information on IPS/IDS profiles, see the following sections.
IPS/IDS Profiles Overview
Navigate to "UTM > IPS/IDS Profiles" to display the list of IPS/IDS rule sets that are
currently defined on the system in the item list bar.
In the expanded view, the first column of the table displays the "Name" of the IPS/IDS
profile. The buttons in the last column allow you to view and adjust the settings for an
existing IPS/IDS profile, create a profile based on a copy of an existing IPS/IDS profile
or delete a profile from the system.
For further information, see Chapter 3.2, "Icons and Buttons", on page 21.
IPS/IDS Profiles Settings
Use the "IPS/IDS Profiles" settings to configure custom rule sets.
You are not able to configure IPS/IDS profiles until you have installed the IPS license
module update. For further information, see Chapter 3.4.1.3, "Updates", on page 33.
Under "UTM > IPS/IDS Profiles", you can add a new or edit an existing IPS/IDS pro-
file.
The "IPS/IDS Profile" settings allow you to configure the following elements:
Field Description
"Name" Enter a name for the IPS/IDS profile.
"Action" Select the desired action from the drop-down list. When the action is set to
Continue and an IPS/IDS rule matches, access to the item is permitted. When
the action is set to Reject, access to the item is denied.
Menu Reference
To Next Page
Loading...