AudioCodes Mediant 500 E-SBC, Руководство пользователя

Страница: 147 / 920

User's Manual 13. Security
Version 6.8 147 Mediant 500 E-SBC
13.3.1 Enabling IDS
The following procedure describes how to enable IDS.

To enable IDS:
1. Open the IDS Global Parameters page ( Configuration tab > VoIP menu > Security >
Intrusion Detection and Prevention > Global Parameters ).
Figure 13-2: Enabling IDS on IDS Global Parameters Page
2. From the 'Intrusion Detection System' drop-down list, select Enable .
3. Click Submit , and then reset the device with a burn-to-flash for the setting to take
effect.
13.3.2 Configuring IDS Policies
Configuring IDS Policies is a two-stage process that includes the following tables:
1. IDS Policy (parent table): Defines a name and description for the IDS Policy. You
can configure up to 20 IDS Policies.
2. IDS Rules table (child table): Defines the actual rules for the IDS Policy. Each IDS
Policy can be configured with up to 20 rules.
Note: A maximum of 100 IDS rules can be configured (regardless of how many rules
are assigned to each policy).
The device provides the following pre-configured IDS Policies that can be used in your
deployment (if they meet your requirements):

"DEFAULT_FEU": IDS Policy for far-end users in the WAN

"DEFAULT_PROXY": IDS Policy for proxy server

"DEFAULT_GLOBAL": IDS Policy with global thresholds
These default IDS Policies are read-only and cannot be modified.

To configure an IDS Policy:
1. Open the IDS Policy Table page ( Configuration tab > VoIP menu > Security >
Intrusion Detection and Prevention > Policy Table ); the table shows the pre-
configured IDS policies:
Figure 13-3: IDS Policy Table with Default Rules