ZyXEL Communications ZyWALL 1050 User Manual page 343

The following table describes the fields in this screen.
Table 111 Policy > IDP > Profile > Packet Inspection_Group View
LABEL
Name
Switch to query
view
Service
Message
SID
Severity
Policy Type This is the attack type as defined on the ZyWALL. See
Activation
Log
Chapter 21 IDP
DESCRIPTION
This is the name of the profile. You may use 1-31 alphanumeric characters,
underscores( _ ), or dashes (-), but the first character cannot be a number. This value
is case-sensitive. These are valid, unique profile names:
MyProfile
mYProfile
Mymy12_3-4
These are invalid profile names:
1mYProfile
My Profile
MyProfile?
Whatalongprofilename123456789012
Click this button to go to a screen where you can search for signatures by criteria
such as name, ID, severity, attack type, vulnerable attack platforms, service category,
log options or actions.
Click the + sign next to a service group to expand it. A service group is a group of
related IDP signatures.
This is the name of the signature.
This is the signature ID (identification) number that uniquely identifies a ZyWALL
signature.
These are the severities as defined in the ZyWALL. The number in brackets is the
number you use if using commands.
Severe (5): These denote attacks that try to run arbitrary code or gain system
privileges.
High (4): These denote known serious vulnerabilities or attacks that are probably not
false alarms.
Medium (3): These denote medium threats, access control attacks or attacks that
could be false alarms.
Low (2): These denote mild threats or attacks that could be false alarms.
Very Low (1): These denote possible attacks caused by traffic such as Ping, trace
route, ICMP queries etc.
description of each type.
Click the icon to enable or disable a signature or group of signatures.
These are the log options:
original setting: Select this option to return each log option within a service group to
its previously saved configuration.
no: Select this option on an individual signature or a complete service group to have
the ZyWALL create no log when a packet matches a signature(s).
log: Select this option on an individual signature or a complete service group to have
the ZyWALL create a log when a packet matches a signature(s).
log alert: An alert is an e-mailed log for more serious events that may need more
immediate attention. Select this option to have the ZyWALL send an alert when a
packet matches a signature(s).
ZyWALL 1050 User's Guide
Table 109 on page 339 for a
343