Signature Update - ZyXEL Communications Vantage CNM 2.3 User Manual

Chapter 6 Device Security Settings
Table 67 Device Operation > Device Configuration > Security > IDP > Anomaly
TYPE
Log
Alert
Action
Apply
Reset

6.10 Signature Update

The device comes with built-in signatures created by the ZyXEL Security Response
Team (ZSRT). These are regularly updated as new intrusions evolve. Use the
Update screen to immediately download or schedule new signature downloads.
Note: You should have already registered the device at myZyXEL.com (http://
www.myzyxel.com/myzyxel/) and also have either activated the trial license or
standard license (iCard). If your license has expired, you will have to renew it
before updates are allowed.
186
DESCRIPTION
Select the head of the Log column to generate logs for all rules included
in an anomaly detection method. Select Log to generate a log when a
match is found for the corresponding rule.
Select the head of the Alert column to activate the alert for all rules in
an anomaly detection method. Select Alert to generate an alert log
when a match is found for the corresponding rule.
Select what the selected device should do when a packet matches a
rule.
No Action: The selected device takes no action when a packet matches
the signature(s).
Drop Packet: The packet is silently discarded.
Drop Session: When the firewall is enabled, subsequent TCP/IP
packets belonging to the same connection are dropped. Neither sender
nor receiver are sent TCP RST packets. If the firewall is not enabled only
the packet that matched the signature is dropped.
Reset Sender: When the firewall is enabled, the TCP/IP connection is
silently torn down. Just the sender is sent TCP RST packets. If the
firewall is not enabled only the packet that matched the signature is
dropped.
Reset Receiver: When the firewall is enabled, the TCP/IP connection is
silently torn down. Just the receiver is sent TCP RST packets. If the
firewall is not enabled only the packet that matched the signature is
dropped.
Reset Both: When the firewall is enabled, the TCP/IP connection is
silently torn down. Both sender and receiver are sent TCP RST packets.
If the firewall is not enabled only the packet that matched the signature
is dropped.
Click this button to save your changes back to the device.
Click this button to begin configuring this screen afresh.
Vantage CNM User's Guide