Add Profile > Query View - ZyXEL Communications USG40 User Manual

Table 179 Configuration > UTM Profile> IDP > Profile > Add > Group View (continued)
LABEL
Action
#
Status
SID
Log
Action
OK
Cancel
Save
27.2.4 Add Profile > Query View
In the group view screen, click Switch to query view to search for signatures by criteria such as
Name, ID, Severity, Policy Type, Platform, Service, Platforms, or actions.
Chapter 27 IDP
DESCRIPTION
To edit what action the ZyWALL/USG takes when a packet matches a signature, select the
signature and use the Action icon.
none: Select this action on an individual signature or a complete service group to have the
ZyWALL/USG take no action when a packet matches the signature(s).
drop: Select this action on an individual signature or a complete service group to have the
ZyWALL/USG silently drop a packet that matches the signature(s). Neither sender nor
receiver are notified.
reject-sender: Select this action on an individual signature or a complete service group to
have the ZyWALL/USG send a reset to the sender when a packet matches the signature. If
it is a TCP attack packet, the ZyWALL/USG will send a packet with a 'RST' flag. If it is an
ICMP or UDP attack packet, the ZyWALL/USG will send an ICMP unreachable packet.
reject-receiver: Select this action on an individual signature or a complete service group
to have the ZyWALL/USG send a reset to the receiver when a packet matches the
signature. If it is a TCP attack packet, the ZyWALL/USG will send a packet with an a 'RST'
flag. If it is an ICMP or UDP attack packet, the ZyWALL/USG will do nothing.
reject-both: Select this action on an individual signature or a complete service group to
have the ZyWALL/USG send a reset to both the sender and receiver when a packet matches
the signature. If it is a TCP attack packet, the ZyWALL/USG will send a packet with a 'RST'
flag to the receiver and sender. If it is an ICMP or UDP attack packet, the ZyWALL/USG will
send an ICMP unreachable packet.
This is the entry's index number in the list.
The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is
inactive.
Type the exact signature ID (identification) number that uniquely identifies a ZyWALL/USG
IDP signature.
These are the log options. To edit this, select an item and use the Log icon.
This is the action the ZyWALL/USG should take when a packet matches a signature here. To
edit this, select an item and use the Action icon.
A profile consists of three separate screens. If you want to configure just one screen for an
IDP profile, click OK to save your settings to the ZyWALL/USG, complete the profile and
return to the profile summary page.
Click Cancel to return to the profile summary page without saving any changes.
If you want to configure more than one screen for an IDP profile, click Save to save the
configuration to the ZyWALL/USG, but remain in the same page. You may then go to
another profile screen (tab) in order to complete the profile. Click OK in the final profile
screen to complete the profile.
ZyWALL/USG Series User's Guide
450