ZyXEL Communications 3.1 User Manual

Page of 386
 Chapter 22 IDP Commands
ZyWALL (ZLD) CLI Reference Guide
189
Note: It is recommended you use the web configurator to search for signatures.
22.3.6.1  Search Parameter Tables
The following table displays the command line severity, platform and policy type equivalent values. 
If you want to combine platforms in a search, then add their respective numbers together. For 
Table 105   
Signature Search Command
COMMAND
DESCRIPTION
idp search signature my_profile name quoted_string 
sid SID severity severity_mask platform platform_mask 
policytype policytype_mask service service_mask 
activate {any | yes | no} log {any | no | log | log-
alert} action action_mask
Searches for signature(s) in a profile by the parameters 
specified. The quoted string is any text within the 
signature name in quotes, for example, [idp search 
LAN_IDP name "WORM" sid 0 severity 0 platform 0 
policytype 0 service 0 activate any log any action] 
searches for all signatures in the LAN_IDP profile 
containing the text “worm” within the signature name.
idp search system-protect my_profile name 
quoted_string sid SID severity severity_mask platform 
platform_mask policytype policytype_mask service 
service_mask activate {any | yes | no} log {any | no 
| log | log-alert} action action_mask
Searches for signature(s) in a system-protect profile by 
the parameters specified. The quoted string is any text 
within the signature name in quotes, for example, [idp 
search LAN_IDP name "WORM" sid 0 severity 0 platform 0 
policytype 0 service 0 activate any log any action] 
searches for all signatures in the LAN_IDP profile 
containing the text “worm” within the signature name.
show idp search signature my_profile name 
quoted_string sid SID severity severity_mask platform 
platform_mask policytype policytype_mask service 
service_mask activate {any | yes | no} log {any | no 
| log | log-alert} action action_mask
Searches for signature(s) in a profile by the parameters 
specified. The quoted string is any text within the 
signature name in quotes, for example, [idp search 
LAN_IDP name "WORM" sid 0 severity 0 platform 0 
policytype 0 service 0 activate any log any action] 
searches for all signatures in the LAN_IDP profile 
containing the text “worm” within the signature name.
show idp search system-protect my_profile name 
quoted_string sid SID severity severity_mask platform 
platform_mask policytype policytype_mask service 
service_mask activate {any | yes | no} log {any | no 
| log | log-alert} action action_mask
Searches for signature(s) in a system-protect profile by 
the parameters specified. The quoted string is any text 
within the signature name in quotes, for example, [idp 
search LAN_IDP name "WORM" sid 0 severity 0 platform 0 
policytype 0 service 0 activate any log any action] 
searches for all signatures in the LAN_IDP profile 
containing the text “worm” within the signature name.