Hi!
I have just started to use this UTM firewall and so far im liking it a lot. None the less I enabled the IPS function and had my LAN in the global IPS setting box, this did not generate any hits on the IPS rules so i added my WAN address and now I see some hits.
So to my question is it ok to have my WAN interface in the global IPS setting box so that it protects my WAN connection as well.
The reason for me asking is that the texts states (To start the Intrusion Prevention System, please specify your Local networks and a policy to apply to detected attacks.) I searched the forums and the Google but I could not find any information.
When only my LAN was in the box i got not hits at all in the logs during a 48 hour period.
System
Firmware version: 9.105-9
Pattern version: 51225
Running on a EXI 5.1
CPU I7 4 cores
Ram 16 Gig
two intel NIC's
This thread was automatically locked due to age.
