ZyXEL Communications ZyWALL 1000 ユーザーズマニュアル
Chapter 29 IDP
ZyWALL USG 1000 User’s Guide
426
The following table describes the fields in this screen.
Table 131 Anti-X > IDP > Profile > Group View
LABEL
DESCRIPTION
Name
This is the name of the profile. You may use 1-31 alphanumeric characters,
underscores(
_
), or dashes (-), but the first character cannot be a number. This value
is case-sensitive. These are valid, unique profile names:
MyProfile
mYProfile
Mymy12_3-4
These are invalid profile names:
1mYProfile
My Profile
MyProfile?
Whatalongprofilename123456789012
MyProfile
mYProfile
Mymy12_3-4
These are invalid profile names:
1mYProfile
My Profile
MyProfile?
Whatalongprofilename123456789012
Switch to
query view
Click this button to go to a screen where you can search for signatures by criteria
such as name, ID, severity, attack type, vulnerable attack platforms, service
category, log options or actions.
Service
Click the + sign next to a service group to expand it. A service group is a group of
related IDP signatures.
Message
This is the name of the signature.
SID
This is the signature ID (identification) number that uniquely identifies a ZyWALL
signature.
Severity
These are the severities as defined in the ZyWALL. The number in brackets is the
number you use if using commands.
Severe (5): These denote attacks that try to run arbitrary code or gain system
Severe (5): These denote attacks that try to run arbitrary code or gain system
privileges.
High (4): These denote known serious vulnerabilities or attacks that are probably not
High (4): These denote known serious vulnerabilities or attacks that are probably not
false alarms.
Medium (3): These denote medium threats, access control attacks or attacks that
Medium (3): These denote medium threats, access control attacks or attacks that
could be false alarms.
Low (2): These denote mild threats or attacks that could be false alarms.
Very Low (1): These denote possible attacks caused by traffic such as Ping, trace
Low (2): These denote mild threats or attacks that could be false alarms.
Very Low (1): These denote possible attacks caused by traffic such as Ping, trace
route, ICMP queries etc.
Policy
Type
This is the attack type as defined on the ZyWALL. See
for a
description of each type.
Activation
Click the icon to enable or disable a signature or group of signatures.
Log
These are the log options:
original setting: Select this option to return each log option within a service group to
original setting: Select this option to return each log option within a service group to
its previously saved configuration.
no: Select this option on an individual signature or a complete service group to have
no: Select this option on an individual signature or a complete service group to have
the ZyWALL create no log when a packet matches a signature(s).
log: Select this option on an individual signature or a complete service group to have
log: Select this option on an individual signature or a complete service group to have
the ZyWALL create a log when a packet matches a signature(s).
log alert: An alert is an e-mailed log for more serious events that may need more
log alert: An alert is an e-mailed log for more serious events that may need more
immediate attention. Select this option to have the ZyWALL send an alert when a
packet matches a signature(s).