ZyXEL Communications ZYWALL USG CLI - Page 167

Chapter 20 IDP Commands
ZyWALL (ZLD) CLI Reference Guide
167
[no] icmp-decoder {truncated-header |
truncated-timestamp-header | truncated-
address-header} activate
Activates or deactivates icmp decoder options
icmp-decoder {truncated-header | truncated-
timestamp-header | truncated-address-header}
log [alert]
Sets icmp decoder log or alert options.
no icmp-decoder {truncated-header |
truncated-timestamp-header | truncated-
address-header} log
Deactivates icmp decoder log options.
icmp-decoder {truncated-header | truncated-
timestamp-header | truncated-address-header}
action {drop | reject-sender | reject-
receiver | reject-both}}
Sets icmp decoder action
no icmp-decoder {truncated-header |
truncated-timestamp-header | truncated-
address-header} action
Deactivates icmp decoder actions.
show idp anomaly profile scan-detection [all
details]
Shows all scan-detection settings of the
specified IDP profile.
show idp anomaly profile scan-detection {tcp-
portscan | tcp-decoy-portscan | tcp-portsweep |
tcp-distributed-portscan | tcp-filtered-portscan
| tcp-filtered-decoy-portscan | tcp-filtered-
distributed-portscan | tcp-filtered-portsweep}
details
Shows selected TCP scan-detection settings
for the specified IDP profile.
show idp anomaly profile scan-detection {udp-
portscan | udp-decoy-portscan | udp-portsweep |
udp-distributed-portscan | udp-filtered-portscan
| udp-filtered-decoy-portscan |
udp-filtered-distributed-portscan | udp-
filtered-portsweep} details
Shows UDP scan-detection settings for the
specified IDP profile.
show idp anomaly profile scan-detection {ip-
protocol-scan | ip-decoy-protocol-scan | ip-
protocol-sweep | ip-distributed-protocol-scan |
ip-filtered-protocol-scan | ip-filtered-decoy-
protocol-scan | ip-filtered-distributed-
protocol-scan | ip-filtered-protocol-sweep}
details
Shows IP scan-detection settings for the
specified IDP profile.
show idp anomaly profile scan-detection {icmp-
sweep | icmp-filtered-sweep | open-port} details
Shows ICMP scan-detection settings for the
specified IDP profile.
show idp anomaly profile flood-detection [all
details]
Shows all flood-detection settings for the
specified IDP profile.
show idp anomaly profile flood-detection {tcp-
flood | udp-flood | ip-flood | icmp-flood}
details
Shows flood-detection settings for the specified
IDP profile.
show idp anomaly profile http-inspection all
details
Shows http-inspection settings for the specified
IDP profile.
Table 90 Editing/Creating Anomaly Profiles (continued)
COMMAND DESCRIPTION