About Intrusion Prevention Service Settings; Configure The Intrusion Prevention Service - Watchguard Firebox X15 User Manual

Gateway AntiVirus and Intrusion Prevention Service
11. When you enable Gateway AV/IPS for SMTP, you must specify the IP address of your SMTP email server
in the Email Server IP Address field near the bottom of the page. The Edge creates a policy for you to
allow incoming SMTP traffic to this IP address.
Gateway AV does not scan archive file formats such as .zip or packed executables.

About Intrusion Prevention Service settings

The Intrusion Prevention Service includes a set of signatures associated with specific commands or text found
in commands that could be harmful. The Intrusion Prevention Service works together with the SMTP, POP3,
HTTP, and FTP proxies. If you have not configured these proxies, they are automatically configured when you
enable Gateway AV or IPS for that protocol.
You can see the name of an intrusion that IPS has blocked in the log records. Select Logging from the sidebar
menu. You can also view general statistics for Gateway AV/IPS on the Gateway AV/IPS page, and trend
reporting for Gateway AV/IPS in System Status > Security Services.

Configure the Intrusion Prevention Service

1. To connect to the System Status page, type
address of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Gateway AV/IPS > Settings.
3. Select ore or more check boxes to enable IPS for SMTP, POP3, FTP, HTTP, or the Outgoing service on
your Edge. If you enable IPS for HTTP or the Outgoing service, you can also enable the additional
Spyware Protection feature that automatically protects your network from spyware applications such
as adware, trackware, or dialer or hijacker attacks.
250
in the browser address bar, followed by the IP
https://
Firebox X Edge e-Series