Chapter 29 Secure Policy
ZyWALL Series CLI Reference Guide
236
•ICMP Decoder
• IP Decoder
Protocol anomaly policies may be updated when you upload new firmware.
ADP Flood Detection Whitelist
Certain legitimate services, such as IP Sec with NAT traversal, might be erroniously treated as anomalous
traffic by ADP flood detection. To prevent this, you can add the clients and/or services to the ADP Flood
Detection Whitelist, which means they are not scanned for network flooding.
29.4.1 ADP Command Input Values
The following table identifies the values required for many of these commands. Other input values are
discussed with the corresponding commands.
29.4.2 ADP Activation Commands
Use these commands to activate ADP and see status.
29.4.3 ADP Global Profile Commands
These commands apply to all ADP profiles on the Zyxel Device.
Table 118 Input Values for ADP Commands
LABEL DESCRIPTION
zone-rule
The name of a zone. For some Zyxel Device models, use up to 31 characters (a-zA-Z0-9_-).
The name cannot start with a number. This value is case- sensitive.
For other Zyxel Device models use pre-defined zone names like DMZ, LAN1, SSL VPN,
WLAN, IPSec VPN, OPT, and WAN
adp-profile
The name of an ADP profile. It can consist of alphanumeric characters, the underscore,
and the dash, and it is 1-31 characters long. Spaces are not allowed.
Table 119 ADP Activation Commands
LABEL DESCRIPTION
[no] idp anomaly
activate
Anomaly detection does not require registration. The no command disables the
specified service.
show idp anomaly
activation
Displays anomaly detection service status.
Table 120 ADP Global Profile Commands
LABEL DESCRIPTION
idp rename anomaly
<profile1> <profile2>
Rename an ADP anomaly profile originally named profile1 to profile2.
no idp anomaly
<profile3>
Delete an ADP profile named profile3.
show idp anomaly base
profile
Displays all anomaly detection base profiles.
To Next Page
Loading...
