Chapter 34 IDP
ZyWALL USG 100/200 Series User’s Guide
626
destination port is the service port (53 for DNS in this case) that the attack tries to
exploit.
Figure 442 Custom Signature Log
34.9 IDP Technical Reference
This section contains some background information on IDP.
Host Intrusions
The goal of host-based intrusions is to infiltrate files on an individual computer or
server in with the goal of accessing confidential information or destroying
information on a computer.
You must install a host IDP directly on the system being protected. It works
closely with the operating system, monitoring and intercepting system calls to the
kernel or APIs in order to prevent attacks as well as log them.
Disadvantages of host IDPs are that you have to install them on each device (that
you want to protect) in your network and due to the necessarily tight integration
with the host operating system, future operating system upgrades could cause
problems.
To Next Page
Loading...
