Traffic Anomaly Profiles - ZyXEL Communications ZyWall ATP series User Manual

Figure 331 Configuration > Security Policy > ADP > Profile
The following table describes the labels in this screen.
Table 193 Configuration > Security Policy > ADP > Profile
LABEL
Profile Management
Add
Edit
Remove
References
Clone
#
Name
Description
Base Profile
Reference

25.5.3 Traffic Anomaly Profiles

Traffic anomaly detection looks for abnormal behavior such as scan or flooding attempts. In the
Configuration > Security Policy > ADP > Profile screen, click the Edit or Add icon and choose a base
profile. Traffic Anomaly is the first tab in the profile.
Chapter 25 Security Policy
DESCRIPTION
Create ADP profiles here and then apply them in the Configuration > Security Policy
> ADP > Profile screen.
Click Add and first choose a none or all Base Profile.
• none base profile sets all ADP entries to have Log set to no and Action set to
none by default.
• all base profile sets all ADP entries to have Log set to log and Action set to block
by default.
Select an entry and click this to be able to modify it.
Select an entry and click this to delete it.
Select an entry and click References to open a screen that shows which settings use
the entry. Click Refresh to update information on this screen.
Use Clone to create a new entry by modifying an existing one.
• Select an existing entry.
• Click Clone.
• A configuration copy of the selected entry pops up. You must at least change
the name as duplicate entry names are not allowed.
This is the entry's index number in the list.
This is the name of the profile you created.
This is the description of the profile you created.
This is the name of the base profile used to create this profile.
This is the number of object references used to create this profile.
ZyWALL ATP Series User's Guide
485