Applications And Protections; View By Inspection Profile; Selecting The Configuration Profile - Stormshield SN series Configuration Manual

APPLICATIONS AND PROTECTIONS

In this module, you will be able to manage the configuration of your alarms generated by the
firewall's applications and protection modules.
An inspection profile (IPS_00) is a set of application profiles (default00 – See the module
Protocols). An application profile contains the configuration of the alarms from a protocol scan
that can be modified in this module. Its other configuration elements can be accessed in the
corresponding "Protocols" menu.
To configure inspection profiles according to these application profiles, go to the module
Inspection profiles and click on Go to profiles.
The signatures of these alarms are regularly updated via Active Update for products under
maintenance (IPS: contextual protection signatures) and if this database is enabled in the Active
Update configuration (module Configuration / System / Active Update).
Whether these alarms are raised therefore depends on the configuration of these protocol scans
as well as the security policy applied.
In this module, the alarm configuration is divided into two views:
"view by inspection profile" (also called " view by configuration")
l
"view by context" (also called "view by protocol")
l

View by inspection profile

Selecting the configuration profile

You can configure up to 10 profiles, bearing by default the names "IPS_00", "IPS_01" etc. These
names cannot be modified in the Alarms module but in the menu Application
protection\Inspection profile (Go to profiles button):
Select a configuration from the drop-down list.
Click on "Edit" and select "Rename".
Change the name of the profile in the field and add a comment if necessary.
Click on "Update".
You will see your modified profile in the drop-down list of configurations in the Applications and
Protections module.
Selecting multiple objects
A multiple selection allows assigning the same action to several alarms. Select several successive
alarms using the Shift ñkey or individually by holding down the Ctrl key. You can also remove
an item from an existing selection with the Ctrl key.
Some column titles have the icon
assigning a setting to several selected alarms (Action, Level, New and Advanced).
Page 41/448
SNS - USER CONFIGURATION MANUAL V.3
. When you click on it, a menu appears and suggests
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
APPLICATIONS AND PROTECTIONS