The Ips Screen - ZyXEL Communications USG FLEX H Series User Manual

5.8 The IPS Screen

Click Security Statistics > IPS to display the following screen. This screen displays IPS (Intrusion Prevention
System) statistics. An IPS system can detect malicious or suspicious packets and respond instantaneously
by rejecting or dropping the packets. The Zyxel Device IPS protects your network against network-based
intrusions.
Figure 63 Security Statistics > IPS
The following table describes the labels in this screen.
Table 38 Security Statistics > IPS
LABEL
Last 24 Hours Summary
Top Entries By
Refresh
Flush Data
Time
+ Allow List
Signature ID
Signature Name
Type
Severity
Source IP
Destination IP
Chapter 5 Monitor
DESCRIPTION
Use this field to have the following (read-only) table display the top IPS log entries by
Signature Name, Source IP or Destination IP. This table displays the most common, recent
IPS logs. See the log screen for less common IPS logs or use a syslog server to record all
IPS logs.
Select Signature Name to list the most common signatures that the Zyxel Device has
detected.
Select Source IP to list the source IP addresses from which the Zyxel Device has detected
the most intrusion attempts.
Select Destination IP to list the most common destination IP addresses for intrusion
attempts that the Zyxel Device has detected.
Click this button to update the report display.
Click this button to discard all of the screen's statistics and update the report display.
This column displays the date and time IPS blocked this IP address.
Select an entry and click this to add the signature to the IPS allow list.
This column displays when you display the unique value given to each intrusion
detected.
This column displays the name to identify the type of intrusion pattern.
This column displays the categories of intrusions.
This column displays the level of threat that the intrusions may pose.
This column displays the source IP address of the intrusion attempts.
This column displays the destination IP address at which intrusion attempts were
targeted.
USG FLEX H Series User's Guide
75