Profile > Packet Inspection > Query View Screen; Table 111 Policy > Idp > Profile > Packet Inspection_Group View - ZyXEL Communications ZyWALL 1050 User Manual

ZyWALL 1050 User's Guide
Table 111 Policy > IDP > Profile > Packet Inspection_Group View (continued)
LABEL
Action
OK
Cancel
Save
21.7.4 Profile > Packet Inspection > Query View Screen
Click Switch to query view in the screen as shown in
signature query screen. In the query view screen, you can search for signatures by criteria such
as name, ID, severity, attack type, vulnerable attack platforms, service category, log options or
actions.
344
DESCRIPTION
Select what action the ZyWALL should take when a packet matches a signature here.
original setting: Select this action to return each signature in a service group to its
previously saved configuration.
none: Select this action on an individual signature or a complete service group to
have the ZyWALL take no action when a packet matches the signature(s).
drop: Select this action on an individual signature or a complete service group to
have the ZyWALL silently drop a packet that matches the signature(s). Neither sender
nor receiver are notified.
reject-sender: Select this action on an individual signature or a complete service
group to have the ZyWALL send a reset to the sender when a packet matches the
signature. If it is a TCP attack packet, the ZyWALL will send a packet with a 'RST'
flag. If it is an ICMP or UDP attack packet, the ZyWALL will send an ICMP
unreachable packet.
reject-receiver: Select this action on an individual signature or a complete service
group to have the ZyWALL send a reset to the receiver when a packet matches the
signature. If it is a TCP attack packet, the ZyWALL will send a packet with an a 'RST'
flag. If it is an ICMP or UDP attack packet, the ZyWALL will do nothing.
reject-both: Select this action on an individual signature or a complete service group
to have the ZyWALL send a reset to both the sender and receiver when a packet
matches the signature. If it is a TCP attack packet, the ZyWALL will send a packet
with a 'RST' flag to the receiver and sender. If it is an ICMP or UDP attack packet, the
ZyWALL will send an ICMP unreachable packet.
A profile consists of three separate screens. If you want to configure just one screen
for an IDP profile, click OK to save your settings to the ZyWALL, complete the profile
and return to the profile summary page.
Click Cancel to return to the profile summary page without saving any changes.
If you want to configure more than one screen for an IDP profile, click Save to save
the configuration to the ZyWALL, but remain in the same page. You may then go to
another profile screen (tab) in order to complete the profile. Click OK in the final
profile screen to complete the profile.
Figure 221 on page 342 to go to a
Chapter 21 IDP