Chapter 42 IDP Commands
ZyWALL Series CLI Reference Guide
353
42.3.1.1 Example of Global Profile Commands
In this example we rename an IDP signature profile from “old_profile” to “new_profile”, delete the
“bye_profile” and show all base profiles available.
42.3.2 Editing/Creating IDP Signature Profiles
Use these commands to create a new IDP signature profile or edit an existing one. It is recommended
you use the web configurator to create/edit profiles. If you do not specify a base profile, the default
base profile is none.
Note: You cannot change the base profile later!
42.3.3 Editing Rate Based Signatures Profiles
IDP signatures identify traffic packets with suspicious malicious patterns. The Zyxel Device can then
respond instantaneously according to the action you define. If you do not want the Zyxel Device to
respond instantaneously for each suspicious packet detected, use rate based signatures.
Router# configure terminal
Router(config)# idp rename signature
old_profile new_profile
Router(config)# no idp signature bye_profile
Router(config)# show idp signature base profile
No. Base Profile Name
==============================================================
1 none
2 all
3 wan
4 lan
5 dmz
Router(config)#
Table 194 Editing/Creating IDP Signature Profiles
COMMAND DESCRIPTION
idp signature newpro [base {all | lan |
wan | dmz | none}]
Creates a new IDP signature profile called newpro.
newpro uses the base profile you specify. Enters sub-
command mode. All the following commands relate to
the new profile. Use
exit to quit sub-command mode.
[no] signature sid activate
Activates or deactivates an IDP signature.
signature sid log [alert]
Sets log or alert options for an IDP signature
no signature sid log
Deactivates log options for an IDP signature
signature sid action {drop | reject-
sender | reject-receiver | reject-
both}
Sets an action for an IDP signature
no signature sid action
Deactivates an action for an IDP signature.
description description2
Describes the signature profile.
To Next Page
Loading...
