IPS Rules

Hi

I know I am being silly, but how can I turn on and off rules in IPS like you can in v6. I used to be able to search for different apps to block, like Skype but I can't see this feature in V7. It looks like v7 groups are very limited. Are you not using Snort any more.

Also how can I stop someone using Putty to piggy back ports of over the default 80??

Parents

0 BarryG over 18 years ago

Also how can I stop someone using Putty to piggy back ports of over the default 80??

Force everyone throught the http proxy (i.e. don't allow port 80 through the fw) and disable the CONNECT method in the proxy settings.

Barry
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 amcycler over 18 years ago in reply to BarryG

for Skype, Instant Messaging etc look under IM/P2P security, for the rest look under Intrusion Protection and you should be able to from there.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 firebear_01 over 18 years ago in reply to amcycler

Hi all,

Back to the question :

for the handle of false positives the activation/deaktivation of single rules not of rule Groups is needed sometimes and in order to our security policy, every rule is checked if it would enabled or not.
So what to do in V7 ?????

any comment of some astaros are welcomed

thanks
firebear
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 firebear_01 over 18 years ago in reply to firebear_01

Hi,
i dont see anything about this thread ????

Thanks for an astaro answer
firebear
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 18 years ago in reply to firebear_01

Have you e-mailed the v7beta mailbox with a question about the missing functionality. That gets a better response than comments here. Most times your question here will then be answered or asked for more info where other people add their little variations on the issue.

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 RFCat_vk_01 over 18 years ago in reply to firebear_01

Have you e-mailed the v7beta mailbox with a question about the missing functionality. That gets a better response than comments here. Most times your question here will then be answered or asked for more info where other people add their little variations on the issue.

Ian M
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data