Sophos XG Firewall Web Interface Reference and Admin Guide v16.5

Figure 134: List of Matching Signatures

7. Specify the Action details.

Action

Select an action to be taken from the available options:

Available Options:Recommended: This action means that you want the OS to handle this alert level according to best-fit recommendations.Allow Packet: Allows the packet to its intended destination.Drop Packet: Drops packets if it detects any traffic that matches the signature. Disable:

Disables the signature, if it detects any traffic that matches the signature. Drop Session: Drops the entire session if detects any traffic that matches the signature. Reset: Resets entire session if detects any traffic that matches the signature.Bypass Session: Allows the entire session if detects any traffic that matches the signature.

Figure 135: Action

8. Click Save.

Custom IPS Signatures

This page displays the list of all the custom IPS patterns.

Custom IPS Patterns provide the flexibility to customize IPS for diverse network environments. Predefined IPS patterns included in the device cover common attacks while Custom IPS Patterns protect your network from uncommon attacks that are due to the use of proprietary server, custom protocol, or specialized applications used in the corporate network.

Note: Administrator can create Custom IPS Pattern and configure policies using them. However, the IPS scanning will be effective only if Network Protection module is subscribed.

Add IPS Pattern

1. Go to to Protect > Intrusion Prevention > Custom IPS Signatures and click Add.

2. Enter the IPS Signature details.

| Protect | 125