Chapter 34 IDP
ZyWALL USG 100/200 Series User’s Guide
609
34.3 Introducing IDP Profiles
An IDP profile is a set of packet inspection signatures.
Packet inspection signatures examine packet content for malicious data. Packet
inspection applies to OSI (Open System Interconnection) layer-4 to layer-7
contents. You need to subscribe for IDP service in order to be able to download
new signatures.
In general, packet inspection signatures are created for known attacks while
anomaly detection looks for abnormal behavior (see Chapter 35 on page 641 for
information on anomaly detection).
Apply new
Registration
This link appears if you have not registered for the service or only
have the trial registration. Click this link to go to the screen where
you can register for the service.
Signature
Information
The following fields display information on the current signature set
that the ZyWALL is using.
Current Version This field displays the IDP signature set version number. This number
gets larger as the set is enhanced.
Signature
Number
This field displays the number of IDP signatures in this set. This
number usually gets larger as the set is enhanced. Older signatures
and rules may be removed if they are no longer applicable or have
been supplanted by newer ones.
Released Date This field displays the date and time the set was released.
Update
Signatures
Click this link to go to the screen you can use to download signatures
from the update server.
Apply Click Apply to save your changes.
Reset Click Reset to return the screen to its last-saved settings.
Table 161 Configuration > Anti-X > IDP > General (continued)
LABEL DESCRIPTION
To Next Page
Loading...
