User Manual Part 2

Page 16 Enabling Security Services in SonicOS
Enabling Intrusion Prevention Services
To enable Intrusion Prevention (IPS) in SonicOS:
1. Navigate to the Security Services > Intrusion Prevention
page.
2. Select the Enable Intrusion Prevention checkbox.
3. In the Signature Groups table, select the Prevent All and
Detect All checkboxes based on attack priority.
Note: Prevent All blocks attacks of the chosen priority, and
Detect All saves a log of these attacks that can be
viewed on the Log > View page.
4. Click the Accept button to apply changes.
Intrusion Prevention contains other useful features, including:
• Exclusion Lists for network nodes where IPS
enforcement is not necessary.
• Log Redundancy to control log size during high-volume
intrusion attack attempts by enforcing a delay between log
entries.
Tip: For a complete overview of IPS features, refer to the
SonicOS Enhanced Administrator’s Guide.
TZ_210_GSG.book Page 16 Thursday, November 13, 2008 7:41 PM