Content Security Gateway User’s Manual
2. Click
OK
.
3.
High Risk
: Select drop and log function.
4.
Medium Risk
: Select drop and log function.
5.
Low Risk
: Select pass and log function.
6. Click
OK
.
7. Enable
IDP
function in policy.
When the attack behavior matches the signature, CS-500 will produce log as follows in
Log
function of
IDP Report.
4.6.2 Signature
Provide relative compare rule to different attack behavior, include three sections:
Anomaly,
Pre-defined
and
Custom
.
Anomaly:
Anomaly
signature can allow user to define the signature, in order to detect and prevent the irregular attack
behavior. Take
Syn Flood
as the example:
Definition:
Enable:
Check to enable the protection for Syn Flood signature.
- 188 -
