ZyXEL Communications ZYWALL USG 2000 Support Notes page 215

ZyWALL USG 2000 Support Notes
J. lDP FAQ
J01. Why doesn't the IDP work? Why has the signature updating failed?
Please check if your IDP services are activated and are not expired.
J02. When I use a web browser to configure the IDP, sometimes it will popup
"wait data timeout".
For current release, when you configure IDP and enable all the IDP rules at the same time, you
may see the GUI showing "wait data timeout". This is because GUI can't get the IDP module
setting result for a period of time, even if the configuration of ZyWALL USG 2000 is correct.
J03. When I want to configure the packet inspection (signatures), the GUI
becomes very slow.
We suggest you had better use "Base Profile" to turn on/off signatures.
J04. After I select "Auto Update" for IDP, when will it update the signatures?
After applying "Auto Update", ZyWALL USG 2000 will update signatures Hourly, Daily, or
Weekly. But updating will occur at random minute within the hour specified by user.
J05. If I want to use IDP service, will it is enough if I just complete the
registration and turn on IDP?
Please ensure to activate the "protected zone" you would like to protect and configure the
action for attack of the "protected zone" in the related IDP profile is others than "none".
J06. What are the major design differences in IDP in ZLD1.0x and latest IDP/ADP
in ZLD2.0x?
The following are 3 major differences made from ZLD2.0x 2000:
IDP-Inspects via. Signature
An IDP system can detect malicious or suspicious packets and respond instantaneously. It is
designed to detect pattern-based attacks.
215
All contents copyright (c) 2008 ZyXEL Communications Corporation.