Creating intrusion prevention profiles
Clone the default intrusion prevention profile to create a new profile, and then configure the settings.
To configure intrusion prevention profiles:
- Go to Security Profiles > Intrusion Prevention.
- Select the default profile, and click Clone.
- Type a name for the clone, such as CORP_IP, and click OK. The new profile is created.
- Double-click the new profile to open it for editing, and set the following options:
Name
CORP_IP
Block malicious URLs
Enable
Default filter (for SEV 3,4,5)
Adjust Action from Default to Block.
Scan Outgoing Connections to Botnet Sites
Adjust from Disable to Block.
- Click OK to save the changes.