HP VPN Firewall Appliances Attack Protection Configuration Guide
iii
URPF check modes ·············································································································································· 117
URPF features ······················································································································································· 117
URPF work flow ···················································································································································· 118
Network application ··········································································································································· 119
Configuring the URPF in the Web interface ·············································································································· 120
Configuring URPF ················································································································································ 120
URPF configuration example ······························································································································ 120
Configuring the URPF at the CLI ································································································································· 123
Configuring URPF ················································································································································ 123
URPF configuration example ······························································································································ 123
Configuring IDS collaboration ······························································································································· 125
IDS collaboration overview ········································································································································· 125
Enabling IDS collaboration ········································································································································· 125
Configuration guidelines ············································································································································· 125
Configuring advanced security protection ············································································································ 127
Configuration guidelines ············································································································································· 127
Time tables ···································································································································································· 127
Feature and hardware compatibility ················································································································· 127
Overview ······························································································································································ 128
Creating a time table ·········································································································································· 128
Licenses ········································································································································································· 129
Feature and hardware compatibility ················································································································· 129
Overview ······························································································································································ 129
Viewing license information ······························································································································· 129
Importing a license ·············································································································································· 130
Exporting a license ·············································································································································· 130
Signature upgrade ······················································································································································· 130
Feature and hardware compatibility ················································································································· 130
Overview ······························································································································································ 131
Upgrading the signature database ··················································································································· 131
IPS ·················································································································································································· 132
Feature and hardware compatibility ················································································································· 132
Overview ······························································································································································ 133
Recommended configuration procedure ··········································································································· 133
Configuring IPS log output parameters ············································································································· 133
Creating an IPS policy ········································································································································ 134
Applying an IPS policy ······································································································································· 135
Antivirus ········································································································································································ 137
Feature and hardware compatibility ················································································································· 137
Overview ······························································································································································ 137
Recommended configuration procedure ··········································································································· 138
Configuring antivirus log output parameters ···································································································· 138
Creating an antivirus policy ······························································································································· 139
Applying an antivirus policy ······························································································································ 139
Content monitoring ······················································································································································ 141
Feature and hardware compatibility ················································································································· 141
Overview ······························································································································································ 142
Recommended configuration procedure ··········································································································· 142
Configuring the content monitoring log output parameter ·············································································· 142
Creating a content monitoring policy················································································································ 143
Applying a content monitoring policy ··············································································································· 145
Bandwidth management ············································································································································· 147
Feature and hardware compatibility ················································································································· 147