Ips Configuration Task List; Configuring An Ips Policy - HP MSR Series Configuration Manual

Use this method when the device cannot obtain the IPS signature file automatically.
You must first download the most up to date IPS signature file manually. The device then
obtains the downloaded file to update its local signature library.
Rolling back the IPS signature library
If filtering false alarms or filtering exceptions occur frequently, you can roll back the IPS signature
library to the previous version.

IPS configuration task list

Tasks at a glance
(Required.)
(Optional.) Specifying a parameter profile for an IPS signature action
(Required.)
(Optional.) Importing user-defined IPS signatures
(Required.)
(Required.)
(Optional.) Managing the IPS signature library
(Optional.) Activating DPI services

Configuring an IPS policy

The device provides a default IPS policy and allows you to configure user-defined IPS policies. For a
user-defined policy, you can enable or disable signatures, or assign protection actions to signatures.
An IPS policy includes all signatures on the device, whether or not the signatures are added to the
device before the policy is created.
To configure an IPS policy:
Step
1. Enter system view.
2. Create an IPS policy and
enter its view.
3. Change the status or actions
for an IPS signature.
Configuring an IPS policy
Applying an IPS policy to a DPI application profile
Configuring an IPv4 object policy rule
Applying object policies to zone pairs
Command
system-view
ips policy policy-name
signature override { pre-defined
| user-defined } signature-id
{ { disable | enable }
[ { block-source | drop | permit |
redirect | reset } | capture |
logging ] * }
579
Remarks
N/A
By default, an IPS policy named
default exists, which cannot be
modified or deleted.
By default:
•
Predefined IPS signatures
use the actions and states
defined by the system.
•
User-defined IPS signatures
use the actions and states
defined in the IPS signature
file from which the
signatures are imported.