Chapter 14 Intrusion Detection and Prevention (IDP) Screens
ZyWALL 5/35/70 Series User’s Guide
285
Figure 168 SECURITY > IDP > Signature: Query View
The following table describes the fields in this screen.
Table 82 SECURITY > IDP > Signature: Query View
LABEL DESCRIPTION
Back to group
view
Click this button to go to the IDP group view screen where IDP signatures are
grouped by attack type.
Signature Search Select this to search for a specific signature name or ID (that you already know).
Then select whether to search the signatures by name or ID. Then enter the name
(or part of the name) or the complete ID number of the signature(s) that you want
to find.
Signature Search
by Attributes
Select this to search for signatures that match the criteria that you specify. Then
select the criteria to search for. Hold down the [Ctrl] key if you want to make
multiple selections from a list of attributes.
Severity Search for signatures by severity level(s) (see Table 79 on page 282).
Type Search for signatures by attack type(s) (see Table 78 on page 281). Attack types
are known as policy types in the group view screen.
Platform Search for signatures created to prevent intrusions targeting specific operating
system(s).
Active Search for enabled and/or disabled signatures here.
Log Search for signatures by log option here.
Alert Search for signatures by alert option here.
Action Search for signatures by the response the ZyWALL takes when a packet matches
a signature. See Table 80 on page 282 for action details.
Search Click this button to begin the search. The results display at the bottom of the
screen. Results may be spread over several pages depending on how broad the
search criteria selected were. The tighter the criteria selected, the fewer the
signatures returned.