HP ProCurve Threat Management Solution Implementation Guide 2009-05

4-54
HP ProCurve Network Immunity Manager with HP ProCurve Security Devices
Step 2: Detect Threats
Subtask: Configure Actions for the IPS. You can configure the TMS zl Module’s IPS to
take action if it detects a problem. The actions you select are based on the severity of the threat.
That is, you select an action for each of the following threat levels:
■ Critical
■ Severe
■ Minor
■ Warning
■ Information
As mentioned in the previous section, each signature used to detect a threat is assigned one of
these threat levels.
To configure IPS actions, complete the following steps:
1. In the PCM+ navigation tree, right-click the TMS zl Module.
2. In the menu that is displayed, click TMS-IPS > Action.
Figure 4-42. PCM+ IPS Actions Window (for TMS zl Module)
3. For each threat level, select an action:
• Terminate session
• Block matched packet
• Allow matched packet
4. Select Save Configuration.
5. Click OK.