Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 20: IPS Attack and System Event Responses
Creating IPS attack responses
566
Figure 229: IPS Attack
Responses: Modify
window
Modifying an IPS attack response
When you modify an IPS attack response, the following window appears.
About the Modify Attack Responses: Attack tab
Use this tab to change this attack response’s attack type. An attack is generally
defined as suspect traffic at either the network or application level. Each attack
type identifies a different attack audit event.
1 Select the attack type for which you want Sidewinder G2 to send out a
response. A complete list is provided in Table 39.
To create additional attack types, see “Configuring new event types” on
page 578.
2 Click OK or the next tab you want to modify.
Note: For descriptions of the audit severities, see “Viewing IPS attack and system
event summaries” on page 521.
Table 39: Descriptions of pre-defined attacks
Attack Description
ACL deny Detects when a connection is denied by a rule in the active
policy.
Application
Defense violation
all
Detects attacks of all severities that violate active policy
defined by Application Defenses. This attack category
includes spam filter attacks and keyword filter failure
attacks.
More...