Intrusion Prevention (IPS)

Overview of Intrusion Prevention

This section describes intrusion prevention and its features.

Application Scenarios for Intrusion Prevention

The intrusion prevention function is enabled on the FW to protect intranet servers and clients against intrusions.

Understanding Intrusion Prevention

The intrusion prevention function detects and analyzes all packets and allows or blocks the packets accordingly. This section describes how the FW processes intrusions, the basic concepts for intrusion prevention, and the signature matching order and actions.

Limitations and Precautions for Intrusion Prevention

Read limitations and precautions before configuring intrusion prevention.

Configuring Intrusion Prevention Using the Web UI

Before you configure intrusion prevention, update the intrusion prevention signature database or, if necessary, configure user-defined signatures, create intrusion prevention profiles, reference signatures matching the specified conditions in the intrusion prevention profiles, and apply the intrusion prevention profiles in the security policies.

Configuring Intrusion Prevention Using the CLI

Before you configure intrusion prevention, update the intrusion prevention signature database or, if necessary, configure user-defined signatures, create intrusion prevention profiles, reference signatures matching the specified conditions in the intrusion prevention profiles, and apply the intrusion prevention profiles in the security policies.

Best Practices for Intrusion Prevention

This section describes intrusion prevention best practices.

Configuration Examples for Intrusion Prevention

This section provides examples for configuring intrusion prevention.

Troubleshooting Intrusion Prevention

This section describes how to troubleshoot intrusion prevention.

FAQ about Intrusion Prevention

This section answers some common questions about intrusion prevention.