Enterasys Intrusion Prevention System Manual page 89

Procedure
To configure H.225 Analysis settings:
1. Click the Network Policy View icon and the Network Policies tab.
2. Expand the tree by clicking the expansion symbols and select the desired custom policy name.
The modules for that policy are displayed in the tree.
3. Click the Protocol Analysis Module in the tree.
4. Expand H225 Analysis in the Protocol column.
5. H.225 analysis is disabled by default. To enable it, click disable in the Property column, then
select no from the drop-down list in the Value column.
6. All of the H.225 analysis properties are enabled by default. To disable any of them, click the
desired property in the Property column, then select no from the drop-down list in the Value
column. Refer to the ITU-T H.225 specification for descriptions of the properties.
7. Verbose mode is disabled by default. When enabled, the sensor will log events when certain
evasions occur. To enable it, click verbose in the Property column, then select yes from the
drop-down list in the Value column.
8. The sensor looks at traffic traveling in any direction on port 1720. To edit the existing port 1720
configuration, select that row in the table and click Edit Port. The Add Port Information
dialog box is displayed.
9. To add or exclude a port or port range for analysis, click Add Port. The Add Port Information
dialog box is displayed.
Configuring the Protocol Analysis Module
Creating Network Sensor Policies and Signatures 2-59