Intrusion Prevention

Intrusion prevention security profiles can be created and managed from SDWan Overlay > Security profiles > Intrusion prevention tab. See Intrusion prevention in the FortiOS Administration Guide for more information.

To create a new IPS sensor:

1. Go to the SDWan Overlay > Security profiles > Intrusion prevention tab.

2. Click Create. The New IPS Sensor page is displayed.

3. Enter the Name.

4. Enter a Description.

5. Enable Block malicious URLs.

6. Click Create for IPS Signatures and Filters.

   1. Select the Type.

   2. Configure the filter or signature as required.

      IPS signatures are also listed in the SDWan Overlay > Security profiles > IPS signatures tab. See IPS signatures.

   3. Click OK.

7. Configure the Botnet C&C as desired.

8. Click OK.

To edit a sensor:

1. Go to the Policy > Security Profiles > Intrusion Prevention tab.

2. Select the desired sensor.

3. Click Edit.

4. Edit the security profile as desired.

5. Click OK.

To delete a sensor:

1. Go to the SDWan Overlay > Security profiles > Intrusion Prevention tab.

2. Select the desired sensor.

3. Click Delete. A confirmation dialog is displayed.

4. Click OK.