Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 323 / 861

322 Preventing attacks
Blocking suspicious or malicious traffic with IDS
7
Click OK .
8 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
9 To use the IDS/IPS policy, apply it to your VPN policies, clientless VPN connections, forward filters,
Web VPN connections, port forwarders, or network interfaces.
Related information
For further information related to this topic, see the following:
■
“IDS/IPS—Policies tab” on page 641
■
“IDS/IPS Policy Properties dialog box—General tab” on page 641
■
“About IDS/IPS policies” on page 320
■
“Applying IDS/IPS policies” on page 322
Applying IDS/IPS policies
IDS/IPS policies can be applied to any of the following:
■
VPN policies
■
Clientless VPN connections
■
Forward filters
■
Web VPN connections
■
Port forwarders
■
Network interfaces
Applying an IDS/IPS policy to any of these components provides protection against malicious traffic
passing through the security gateway. By default, no IDS/IPS policies are applied to the security
gateway components.
For information on how to apply IDS/IPS policies to any of the security gateway components, see the
following:
■
Applying IDS/IPS policies to VPN policies
■
Applying IDS/IPS policies to clientless VPN connections
■
Applying IDS/IPS policies to forward filters
■
Applying IDS/IPS policies to Web VPN connections
■
Applying IDS/IPS policies to port forwarders
■
Applying IDS/IPS policies to network interfaces
Applying IDS/IPS policies to VPN policies
VPN policies are applied to secure IPsec tunnels to ensure the integrity and security of data being
passed through a tunnel. Applying an IDS/IPS policy to a VPN policy provides detection and
prevention of malicious traffic from entering the secure IPsec tunnels.
Prerequisites
None.