Creating New Profiles; Procedure To Create A New Profile; Figure 219 Policy > Idp > Profile; Table 108 Policy > Idp > Profile - ZyXEL Communications ZyWALL 1050 User Manual

ZyWALL 1050 User's Guide
Figure 219 Policy > IDP > Profile
The following table describes the fields in this screen.
Table 108 Policy > IDP > Profile
LABEL
Name
Base Profile
(Icons)

21.6 Creating New Profiles

You may want to create a new profile if not all signatures in a base profile are applicable to
your network. In this case you should disable non-applicable signatures so as to improve
ZyWALL IDP processing efficiency.
You may also find that certain signatures or rules are triggering too many false positives or
false negatives. A false positive is when valid traffic is flagged as an attack. A false negative is
when invalid traffic is wrongly allowed to pass through the ZyWALL. As each network is
different, false positives and false negatives are common on initial IDP deployment.
You could create a new 'monitor profile' that creates logs but all actions are disabled. Observe
the logs over time and try to eliminate the causes of the false alarms. When you're satisfied
that they have been reduced to an acceptable level, you could then create an 'inline profile'
whereby you configure appropriate actions to be taken when a packet matches a signature or
rule.

21.6.1 Procedure To Create a New Profile

To create a new profile:
1 Click the 'add' icon in the Policy > IDP > Profile screen to display a pop-up screen
allowing you to choose a base profile.
2 Select a base profile (see
details screen.
3 Type a new profile name
338
DESCRIPTION
This is the name of the profile you created.
This is the base profile from which the profile was created.
Click the 'add' icon in the column header to create a new profile. A pop-up screen
displays requiring you to choose a base profile from which to create the new profile.
Click an edit icon to edit an existing profile.
Click a remove icon to delete an existing profile.
Table 107 on page 337) and then click OK to go to the profile
Chapter 21 IDP