TMS zl Management and Configuration Guide ST.1.0.090213

A-48
Threat Management Services zl Module Command-Line Reference
Global Configuration Context
For example, to drop packets classified as critical, enter the following
command:
ProCurve(tms-module-<slot ID>:config)# ips threat-level
critical terminate
ips signatures
With the ips signatures command, you can enable and disable specific
signatures, as well as update all of your signatures and set the update interval.
You can also enable and disable signatures according to threat level.
Note You cannot disable signatures in the Protocol Anomaly family. If you enter the
command to disable a signature in the Protocol Anomaly family, you will
receive a message that tells says you cannot disable signatures in that family.
To enable or disable a specific signature, enter the following command:
Syntax: ips signatures <signature family> <signature ID> < enable | disable >
Replace <signature family> with the name of the signature family for which
you want to enable or disable the checks.
Replace <signature ID> with the signature ID of the threat for which you
want to enable or disable checks.
To enable or disable a signature according to threat level, enter the following
command:
Syntax: ips signatures threat-level < critical | severe | minor | warning | information >
< enable | disable >
Note When you download new signatures, all signatures will be enabled, even if
they belong to threat-levels or families (or both) that you have already dis-
abled. To disable the now signatures, you must again disable the signatures
according to family or threat level.
To set the update interval for signatures or update your signatures immedi-
ately, enter the following command:
Syntax: ips signatures update < interval < 4-hours | 12-hours | 24-hours | 48-hours | 1-
week | 2-weeks > | now >