Idp Zone To Zone Rules - ZyXEL Communications ZYWALL USG CLI Reference Manual

Table 87 Global Profile Commands
COMMAND
show idp signature base
profile
{all|none|wan|lan|dmz}
settings
show idp profiles
20.3.1.1 Example of Global Profile Commands
In this example we rename an IDP signature profile from "old_profile" to "new_profile",
delete the "bye_profile" and show all base profiles available.
Router# configure terminal
Router(config)# idp rename signature old_profile new_profile
Router(config)# no idp signature bye_profile
Router(config)# show idp signature base profile
No. Base Profile Name
==============================================================
1 none
2 all
3 wan
4 lan
5 dmz
Router(config)#

20.3.2 IDP Zone to Zone Rules

Use the following rules to apply IDP profiles to specific directions of packet travel.
Table 88 IDP Zone to Zone Rule Commands
COMMAND
idp {signature| anomaly } rule { append
| <1..32> | insert <1..32> }
bind profile
no bind
[no] from-zone zone_profile
[no] to-zone zone_profile
[no] activate
idp {signature| anomaly } rule { delete
<1..32> | move <1..32> to <1..32> }
no idp {signature| anomaly } rule
<1..32>
show idp {signature| anomaly } rules
ZyWALL (ZLD) CLI Reference Guide
DESCRIPTION
Lists the specified signature base profile's settings. Use |more to display
the settings page by page.
Displays all IDP signature profiles.
DESCRIPTION
Create an IDP signature or anomaly rule and enter the sub-
command mode.
Binds the IDP profile to the entry's traffic direction.
Removes the IDP profile's binding.
Specifies the zone the traffic is coming from. The no
command removes the zone specification.
Specifies the zone the traffic is going to. The no command
removes the zone specification.
Turns on the IDP profile to traffic direction binding. The no
command turns it off.
Remove or move an IDP profile to traffic direction entry.
Removes an IDP profile to traffic direction entry.
Displays the IDP zone to zone rules.
Chapter 20 IDP Commands
163