Editing System Protect; Signature Search - ZyXEL Communications ZYWALL USG CLI Reference Manual

20.3.5 Editing System Protect

Use these commands to edit the system protect profiles.
Table 91 Editing System Protect Profiles
COMMAND
idp system-protect
[no] signature sid activate
signature sid log [alert]
no signature sid log
signature sid action {drop | reject-sender |
reject-receiver | reject-both}
no signature SID action
show idp system-protect all details

20.3.6 Signature Search

Use this command to search for signatures in the named profile.
It is recommended you use the web configurator to search for signatures.
Table 92 Signature Search Command
COMMAND
idp search signature my_profile name
quoted_string sid SID severity severity_mask
platform platform_mask policytype policytype_mask
service service_mask activate {any | yes | no}
log {any | no | log | log-alert} action
action_mask
idp search system-protect my_profile name
quoted_string sid SID severity severity_mask
platform platform_mask policytype policytype_mask
service service_mask activate {any | yes | no}
log {any | no | log | log-alert} action
action_mask
ZyWALL (ZLD) CLI Reference Guide
Chapter 20 IDP Commands
DESCRIPTION
Configure the system protect profile. Enters
sub-command mode. All the following
commands relate to the new profile. Use
to quit sub-command mode.
Activates or deactivates an IDP signature.
Sets log or alert options for an IDP signature
Deactivates log options for an IDP signature
Sets an action for an IDP signature
Deactivates an action for an IDP signature.
Displays the system protect profile details.
DESCRIPTION
Searches for signature(s) in a profile by the
parameters specified. The quoted string is any
text within the signature name in quotes, for
example, [idp search LAN_IDP name "WORM"
sid 0 severity 0 platform 0 policytype 0 service
0 activate any log any action] searches for all
signatures in the LAN_IDP profile containing
the text "worm" within the signature name.
Searches for signature(s) in a system-protect
profile by the parameters specified. The quoted
string is any text within the signature name in
quotes, for example, [idp search LAN_IDP
name "WORM" sid 0 severity 0 platform 0
policytype 0 service 0 activate any log any
action] searches for all signatures in the
LAN_IDP profile containing the text "worm"
within the signature name.
exit
169