Base Profiles - ZyXEL Communications ZyWALL USG 300 User Manual

Chapter 34 IDP

34.3.1 Base Profiles

The ZyWALL comes with several base profiles. You use base profiles to create new
profiles. In the Configuration > Anti-X > IDP > Profile screen, click Add to
display the following screen.
Figure 430 Base Profiles
The following table describes this screen.
Table 161 Base Profiles
BASE
PROFILE
none
all
wan
lan
600
DESCRIPTION
All signatures are disabled. No logs are generated nor actions are taken.
All signatures are enabled. Signatures with a high or severe severity
level (greater than three) generate log alerts and cause packets that
trigger them to be dropped. Signatures with a very low, low or medium
severity level (less than or equal to three) generate logs (not log alerts)
and no action is taken on packets that trigger them.
Signatures for all services are enabled. Signatures with a medium, high
or severe severity level (greater than two) generate logs (not log alerts)
and no action is taken on packets that trigger them. Signatures with a
very low or low severity level (less than or equal to two) are disabled.
This profile is most suitable for common LAN network services.
Signatures for common services such as DNS, FTP, HTTP, ICMP, IM,
IMAP, MISC, NETBIOS, P2P, POP3, RPC, RSERVICE, SMTP, SNMP, SQL,
TELNET, TFTP, MySQL are enabled. Signatures with a high or severe
severity level (greater than three) generate logs (not log alerts) and
cause packets that trigger them to be dropped. Signatu res with a low or
medium severity level (two or three) generate logs (not log alerts) and
no action is taken on packets that trigger them. Signatures with a very
low severity level (one) are disabled.
ZyWALL USG 300 User's Guide