ZyXEL Communications ZyWALL 310 - 29.4.4 ADP Zone-to-Zone Rule Commands; 29.4.5 ADP Add;Edit Profile Sub Commands

Chapter 29 Secure Policy
ZyWALL Series CLI Reference Guide
237
29.4.4 ADP Zone-to-Zone Rule Commands
These commands bind ADP profiles to traffic directions.
29.4.5 ADP Add/Edit Profile Sub Commands
These commands create or edit ADP profiles.
show idp anomaly
profiles
Displays all ADP anomaly profiles.
show idp anomaly rules
Displays all ADP anomaly rules.
Table 120 ADP Global Profile Commands (continued)
LABEL DESCRIPTION
Table 121 ADP Zone-to-Zone Rule Commands
LABEL DESCRIPTION
idp anomaly rule {append |
<1..32> | insert <1..32>}
Creates an ADP anomaly rule and enters the sub-command mode.
bind profile
Binds the ADP anomaly profile to the entry’s traffic direction.
no bind
Removes the ADP anomaly profile’s binding.
from-zone zone_rule
Specifies the zone the traffic is coming from.
[no] activate
Turns on the ADP anomaly profile to traffic direction binding. The no
command turns it off.
idp anomaly rule {delete
<1..32> | move <1..32> to
<1..32>}
Removes or moves an ADP anomaly profile to traffic direction entry.
no idp anomaly rule <1..32>
Removes an ADP anomaly profile to traffic direction entry.
show idp anomaly rules
Displays the ADP anomaly zone to zone rules.
Table 122 ADP Add/Edit Profile Commands
LABEL DESCRIPTION
idp anomaly adp-profile
[base {all | everything |
none}]
Creates a new IDP anomaly profile called adp-profile. adp-profile
uses the base profile you specify. Enters sub-command mode. All the
following commands relate to the new profile. Use exit to quit sub-
command mode.
description description
description: Use up to 60 printable ASCII characters
no description
The no command removes the descriptive name from the profile.
base {all | everything
| none}
Use the base profile you specify. You cannot change the base profile after
you specify it.
scan-detection
sensitivity {low |
medium | high}
Sets scan-detection sensitivity.
no scan-detection
sensitivity
Clears scan-detection sensitivity. The default sensitivity is medium.
scan-detection block-
period <1..3600>
Sets for how many seconds the ZyWALL / USG blocks all packets from
being sent to the victim (destination) of a detected anomaly attack.