Introducing Idp Custom Signatures; Ip Packet Header; Table 115 Idp > Profile > Protocol Anomaly - ZyXEL Communications ZyWALL 1050 User Manual

ZyWALL 1050 User's Guide
The following table describes the fields in this screen.
Table 115 IDP > Profile > Protocol Anomaly
LABEL
Name
HTTP Inspection/TCP Decoder/UDP Decoder/ICMP Decoder
Name
Activation
Log
Action
OK
Cancel
Save

21.10 Introducing IDP Custom Signatures

Create custom signatures for new attacks or attacks peculiar to your network. Custom
signatures can also be saved to/from your computer so as to share with others.
You need some knowledge of packet headers and attack types to create your own custom
signatures.

21.10.1 IP Packet Header

These are the fields in an Internet Protocol (IP) version 4 packet header.
358
DESCRIPTION
This is the name of the profile. You may use 1-31 alphanumeric characters,
underscores( _ ), or dashes (-), but the first character cannot be a number. This value
is case-sensitive. These are valid, unique profile names:
MyProfile
mYProfile
Mymy12_3-4
These are invalid profile names:
1mYProfile
My Profile
MyProfile?
Whatalongprofilename123456789012
This is the name of the protocol anomaly rule. Click the Name column heading to sort
in ascending or descending order according to the protocol anomaly rule name.
Click the icon to enable or disable a rule or group of rules.
Select the log option here. See
Select what the ZyWALL should do when a packet matches a rule. See
page 343 for action details.
Click OK to save your settings to the ZyWALL, complete the profile and return to the
profile summary page.
Click Cancel to return to the profile summary page without saving any changes.
Click Save to save the configuration to the ZyWALL but remain in the same page.
You may then go to the another profile screen (tab) in order to complete the profile.
Click OK in the final profile screen to complete the profile.
Table 111 on page 343 for option details.
Table 111 on
Chapter 21 IDP