ZyXEL Communications ZyWALL 5 Support Notes page 220

2.1 Setup the IDP service to prevent the intruder's attack:
1. In IDP->General, check Enable Intrusion Detection and Prevention check box to enable IDP
function.
2. In Active option, check all traffic sends to DMZ's check box. Any traffic going from WAN or LAN
interface to ZyWALL's DMZ segment can be protected by IDP engine.
3. Click on the Apply button to save the above settings.
TIPS: IDP/AV scan/detection engine will bypass IPSec VPN traffic, because IPSec VPN traffic are protected in a
secure tunnel. IDP/AV services would not be able to scan/detect any files or packets that are protected by either
password or secure tunnels.
All contents copyright (c) 2006 ZyXEL Communications Corporation.
ZyWALL 5 Support Notes
220