ZyXEL Communications ZyWall - Page 186

Chapter 22 IDP Commands
ZyWALL (ZLD) CLI Reference Guide
186
[no] http-inspection {http-xxx} activate Activates or deactivates http-inspection options where
http-xxx = {ascii-encoding | u-encoding | bare-byte-
unicode-encoding | base36-encoding | utf-8-encoding |
iis-unicode-codepoint-encoding | multi-slash-encoding |
iis-backslash-evasion | self-directory-traversal |
directory-traversal | apache-whitespace | non-rfc-http-
delimiter | non-rfc-defined-char | oversize-request-uri-
directory | oversize-chunk-encoding | webroot-
directory-traversal}
http-inspection {http-xxx} log [alert] Sets http-inspection log or alert.
no http-inspection {http-xxx} log Deactivates http-inspection logs.
[no] http-inspection {http-xxx} action {drop |
reject-sender | reject-receiver | reject-both}}
Sets http-inspection action
[no] tcp-decoder {tcp-xxx} activate Activates or deactivates tcp decoder options where
{tcp-xxx} = {undersize-len | undersize-offset |
oversize-offset | bad-length-options | truncated-options
| ttcp-detected | obsolete-options | experimental-
options}
tcp-decoder {tcp-xxx} log [alert] Sets tcp decoder log or alert options.
no tcp-decoder {tcp-xxx} log Deactivates tcp decoder log or alert options.
[no] tcp-decoder {tcp-xxx} action {drop | reject-
sender | reject-receiver | reject-both}}
Sets tcp decoder action
[no] udp-decoder {truncated-header | undersize-len
| oversize-len} activate
Activates or deactivates udp decoder options
udp-decoder {truncated-header | undersize-len |
oversize-len} log [alert]
Sets udp decoder log or alert options.
no udp-decoder {truncated-header | undersize-len |
oversize-len} log
Deactivates udp decoder log options.
udp-decoder {truncated-header | undersize-len |
oversize-len} action {drop | reject-sender |
reject-receiver | reject-both}
Sets udp decoder action
no udp-decoder {truncated-header | undersize-len |
oversize-len} action
Deactivates udp decoder actions.
[no] icmp-decoder {truncated-header | truncated-
timestamp-header | truncated-address-header}
activate
Activates or deactivates icmp decoder options
icmp-decoder {truncated-header | truncated-
timestamp-header | truncated-address-header} log
[alert]
Sets icmp decoder log or alert options.
no icmp-decoder {truncated-header | truncated-
timestamp-header | truncated-address-header} log
Deactivates icmp decoder log options.
icmp-decoder {truncated-header | truncated-
timestamp-header | truncated-address-header}
action {drop | reject-sender | reject-receiver |
reject-both}}
Sets icmp decoder action
no icmp-decoder {truncated-header | truncated-
timestamp-header | truncated-address-header}
action
Deactivates icmp decoder actions.
show idp anomaly profile scan-detection [all details] Shows all scan-detection settings of the specified IDP
profile.
Table 103 Editing/Creating Anomaly Profiles (continued)
COMMAND DESCRIPTION