Manual ZyXEL ZyWALL USG 20 (page 59 of 150) (English)

607219

Zoom out

Zoom in

1/150

Chapter 3 Protecting Your Network

ZyWALL USG 20-2000 User’s Guide

3 Edit the default log options and actions.

3.7 ADP Profile Configuration

ADP (Anomaly Detection and Prevention) protects against anomalies based on violations of protocol

standards (RFCs – Requests for Comments) and abnormal traffic flows such as port scans.

You may want to create a new profile if not all traffic or protocol rules in a base profile are

applicable to your network. In this case you should disable non-applicable rules so as to improve

ZyWALL ADP processing efficiency.

You may also find that certain rules are triggering too many false positives or false negatives. A

false positive is when valid traffic is flagged as an attack. A false negative is when invalid traffic is

wrongly allowed to pass through the ZyWALL. As each network is different, false positives and false

negatives are common on initial ADP deployment.

You could create a new ‘monitor profile’ that creates logs but all actions are disabled. Observe the

logs over time and try to eliminate the causes of the false alarms. When you’re satisfied that they

have been reduced to an acceptable level, you could then create an ‘inline profile’ whereby you

configure appropriate actions to be taken when a packet matches a detection.

3.7.1 Procedure To Create a New ADP Profile

To create a new profile:

1 Click Configuration > Anti-X > ADP > Profile and in the Profile Management section of this

screen, click the Add icon. A pop-up screen will appear allowing you to choose a base profile.

Select a base profile to go to the profile details screen.

Report abuse

Libble takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Product:

Forumrules

To achieve meaningful questions, we apply the following rules:

First, read the manual;
Check if your question has been asked previously;
Try to ask your question as clearly as possible;
Did you already try to solve the problem? Please mention this;
Is your problem solved by a visitor then let him/her know in this forum;
To give a response to a question or answer, do not use this form but click on the button 'reply to this question';
Your question will be posted here and emailed to our subscribers. Therefore, avoid filling in personal details.

new questions and answers
new manuals

You will receive an email to register for one or both of the options.

Get your user manual by e-mail

Enter your email address to receive the manual of ZyXEL ZyWALL USG 20 in the language / languages: English as an attachment in your email.

The manual is 7,47 mb in size.

You will receive the manual in your email within minutes. If you have not received an email, then probably have entered the wrong email address or your mailbox is too full. In addition, it may be that your ISP may have a maximum size for emails to receive.

Others manual(s) of ZyXEL ZyWALL USG 20

ZyXEL ZyWALL USG 20 Quick start guide - English, German, French, Italian, Swedish, Spanish - 2 pages

The manual is sent by email. Check your email

If you have not received an email with the manual within fifteen minutes, it may be that you have a entered a wrong email address or that your ISP has set a maximum size to receive email that is smaller than the size of the manual.

The email address you have provided is not correct.

Please check the email address and correct it.

Your question is posted on this page

Would you like to receive an email when new answers and questions are posted? Please enter your email address.

Info

ZyXEL ZyWALL USG 20 Manual

Product: