Sophos Firewall

Discussions IPS Actions

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 3 replies
Answers 1 answer
Subscribers 28 subscribers
Views 11100 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS Actions

qasim siddiq over 8 years ago

Dear All,

Please anyone can explain the IPS actions like drop, reset,disable, etc.

and can we block the detected black list ip's for 30 minutes and where can i find the IPS black list ip's.

This thread was automatically locked due to age.

Parents

0 cyberzeus over 7 years ago

There are actually two separate Action fields - one in IPS policy rules and the other in signatures - I have a pending question asking for clarification on the difference between the two.

Also, is addition to the other suggested locations, discussion as to what the different settings mean can be found in the Sophos XG Firewall Command Reference Guide v16.5, at page 393 (rules setting) & 394 (signatures setting).
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 cyberzeus over 7 years ago

There are actually two separate Action fields - one in IPS policy rules and the other in signatures - I have a pending question asking for clarification on the difference between the two.

Also, is addition to the other suggested locations, discussion as to what the different settings mean can be found in the Sophos XG Firewall Command Reference Guide v16.5, at page 393 (rules setting) & 394 (signatures setting).
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data