ZyXEL Communications ZYWALL USG CLI - Editing System Protect; Signature Search

Chapter 20 IDP Commands
ZyWALL (ZLD) CLI Reference Guide
169
20.3.5 Editing System Protect
Use these commands to edit the system protect profiles.
20.3.6 Signature Search
Use this command to search for signatures in the named profile.
" It is recommended you use the web configurator to search for signatures.
Table 91 Editing System Protect Profiles
COMMAND DESCRIPTION
idp system-protect Configure the system protect profile. Enters
sub-command mode. All the following
commands relate to the new profile. Use
exit
to quit sub-command mode.
[no] signature sid activate Activates or deactivates an IDP signature.
signature sid log [alert] Sets log or alert options for an IDP signature
no signature sid log Deactivates log options for an IDP signature
signature sid action {drop | reject-sender |
reject-receiver | reject-both}
Sets an action for an IDP signature
no signature SID action Deactivates an action for an IDP signature.
show idp system-protect all details Displays the system protect profile details.
Table 92 Signature Search Command
COMMAND DESCRIPTION
idp search signature my_profile name
quoted_string sid SID severity severity_mask
platform platform_mask policytype policytype_mask
service service_mask activate {any | yes | no}
log {any | no | log | log-alert} action
action_mask
Searches for signature(s) in a profile by the
parameters specified. The quoted string is any
text within the signature name in quotes, for
example, [idp search LAN_IDP name "WORM"
sid 0 severity 0 platform 0 policytype 0 service
0 activate any log any action] searches for all
signatures in the LAN_IDP profile containing
the text “worm” within the signature name.
idp search system-protect my_profile name
quoted_string sid SID severity severity_mask
platform platform_mask policytype policytype_mask
service service_mask activate {any | yes | no}
log {any | no | log | log-alert} action
action_mask
Searches for signature(s) in a system-protect
profile by the parameters specified. The quoted
string is any text within the signature name in
quotes, for example, [idp search LAN_IDP
name "WORM" sid 0 severity 0 platform 0
policytype 0 service 0 activate any log any
action] searches for all signatures in the
LAN_IDP profile containing the text “worm”
within the signature name.