Configuring Ids Interaction; Ids Interaction Overview - Zte ZXR10 8900 Series User Manual

ZXR10 8900 Series User Manual (FW Volume)
86 Confidential and Proprietary Information of ZTE CORPORATION

Configuring IDS Interaction

IDS Interaction Overview

It is hard for one security system to integrate all security technolo-
gies. It is convenient for management and maintenance to include
IDS, anti-virus, content auditing and other functions into FW and
it can also degrade performance of FW, so it is inappropriate for
FW which acts as GW to integrate all security technologies. Firstly,
IDS needs to update attack pattern database periodically. How-
ever it is obviously inappropriate to upgrade critical devices, such
as FW. Secondly, if FW contains too many additional functions, its
running speed will be slower, which brings bottleneck for commu-
nication between intranet and extranet.
Taking convenience and maintainability of user operation and se-
curity system construction into account, FW designs core platform
in security system and provides sound assistant system for IDS,
anti-virus and other security products to interact with products of
other main IDS and anti-virus manufacturers.
Configuring IDS Interaction
This topic describes how to configure IDS interaction.
1. Adding one IDS interaction rule.
Command
ZXR10_FW.pf #idsserver add ip
<ipaddress> key <string>
Parameter Description:
Parameter
add
ip
<ipaddress>
key
<string>
Command Illustration:
Shared key of FW and interacted IDS device is set manually.
�
If the key of interacted IDS device is generated automat-
ically by system , user needs to give the configuration on
WEBUI interface. For details, please refer to
FW through
Description
This adds one IDS interaction rule.
This sets IP address for interacted IDS.
This is IP address string, in format of A.B.C.D.
This sets shared key with IDS device.
This is one string.
Browser.
Function
This adds one IDS
interaction rule.
Logging into