SonicWALL 5.8.1 Manuale Utente

For complete instructions on setting up SonicWALL Intrusion Prevention Service, refer to 
the SonicWALL Intrusion Prevention Service Administrator’s Guide available on the 
SonicWALL documentation Web site 

.

Selecting Security Services > Intrusion Prevention displays the configuration settings for 
SonicWALL IPS on your SonicWALL security appliance. 

The Intrusion Prevention Service page is divided into three sections:

IPS Status - displays status information on the state of the signature database, your 
SonicWALL IPS license, and other information.

IPS Global Settings - provides the key settings for enabling SonicWALL IPS on your 
SonicWALL security appliance, specifying global SonicWALL IPS protection based on 
three classes of attacks, and other configuration options.

IPS Policies - allows you to view SonicWALL IPS signatures and configure the handling of 
signatures by category groups or on a signature by signature basis. Categories are 
signatures grouped together based on the type of attack.

After activating your Intrusion Prevention Service license, you must enable and configure 
SonicWALL IPS on the SonicWALL management interface to before intrusion prevention 
policies are applied to your network traffic.

SonicWALL IPS must be globally enabled on your SonicWALL security appliance by checking 
the Enable IPS check box in the IPS Global Settings section. A checkmark in the Enable IPS 
check box turns on the service on your SonicWALL security appliance.

Checking the Enable IPS check box does not automatically start SonicWALL IPS protection. 
You must also n the IPS Global Settings section.You must specify a Prevent All action in 
the Signature Groups table to activate intrusion prevention on the SonicWALL security 
appliance, and specify the interface or zones you want to protect.

SonicWALL IPS allows you to globally manage your network protection against attacks by 
simply selecting the class of attacks: High Priority Attacks, Medium Priority Attacks, and 
Low Priority Attacks. Selecting the Prevent All and Detect All check boxes for High Priority 
Attacks and Medium Priority Attacks in the Signature Groups table, and then clicking Apply 
protects your network against the most dangerous and disruptive attacks. For more detailed 
information on configuring global signature groups, refer to “Configuring Global Signature 
Groups” in the SonicWALL Intrusion Prevention Service Administrator’s Guide available at 

Leaving the High Priority Attacks, Medium Priority Attacks, and Low Priority Attacks 
signature groups with no Prevent All action checked means no intrusion prevention is 
occurring on the SonicWALL security appliance.