Detailed information on Intrusion Prevention Signature (IPS) Signature IDs

Description

Resolution for SonicOS 7.X

This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.

For a list of signature categories on the SonicWall:

  1. Login to the SonicWall management interface; navigate to POLICY | Security Services | Intrusion Prevention.
  2. Under Signatures tab you can view and manage IPS signatures by category groups or on a signature by signature basis. Categories are signatures grouped together based on the type of attack, and they are listed in the Category menu.

    Image

    NOTE: All the entries listed in the IPS Polices table are from the SonicWall IPS signature database downloaded to your SonicWall security appliance. Categories and signatures are dynamically updated by the SonicWall Intrusion Prevention Service. Categories and signatures dynamically change over time in response to new threats.

  3. Select All categories or an individual category from the Category menu. OR Enter the Signature ID (SID) or signature name in the search box.
  4. To change any settings for individual signature or category, click on the edit icon which appears when you hover the mouse over respective signature or category.
  5. To view additional signature information click on the signature directly

    Image


Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

For a list of signature categories on the SonicWall:

  1. Login to the SonicWall management interface; navigate to MANAGE | Security Services | Intrusion Prevention.
  2. Under IPS Policies section in the Intrusion Prevention page you can view and manage IPS signatures by category groups or on a signature by signature basis. Categories are signatures grouped together based on the type of attack, and they are listed in the Category menu.

    Image

    NOTE: All the entries listed in the IPS Polices table are from the SonicWall IPS signature database downloaded to your SonicWall security appliance. Categories and signatures are dynamically updated by the SonicWall Intrusion Prevention Service. Categories and signatures dynamically change over time in response to new threats.

  3. Select All categories or an individual category from the Category menu. OR Enter the Signature ID (SID) in the Lookup Signature ID field.
  4. Click on the edit icon in the Configure column for the category you want to change.
  5. To view additional signature information click on the signature directly:
    Image
    Image


NOTE: In the SonicWall firewall log you can click on the IPS signature ID to get detailed information about the attack.

Related Articles

  • SonicWall UTM throws an error : " Invalid Authentication " Error: SN and EPAID Do Not Match
    Read More
  • Using 31-Bit Prefixes on IPv4 Address Error: Index of the interface: Invalid IP Address
    Read More
  • How to block a website using CFS 4.0 CLI commands
    Read More
not finding your answers?
was this article helpful?