TMS zl Management and Configuration Guide ST.1.1.100430

A-79
Command-Line Reference
Global Configuration Context
Syntax: ips protocol-anomaly mime [ header-size <header size> | boundaries <num-
ber of boundaries per message> ]
Replace <header size> with the maximum header size in bytes (100–2048).
Replace <number of boundaries per message> with the maximum num-
ber of boundaries allowed per message (1–10).
SMTP. To configure the SMTP header size, enter the following command:
Syntax: ips protocol-anomaly smtp header-size <header size>
Replace <header size> with the maximum header size in bytes (100–2048).
ips signatures
With the ips signatures command, you can enable and disable specific signa-
tures, as well as update all of your signatures and set the update interval. You
can also enable and disable signatures according to threat level.
Note You cannot disable signatures in the Protocol Anomaly family. If you enter the
command to disable a signature in the Protocol Anomaly family, you will
receive a message that tells says you cannot disable signatures in that family.
To enable or disable a specific signature, enter the following command:
Syntax: ips signatures <signature family> <signature ID> < enable | disable >
Replace <signature family> with the name of the signature family for which you
want to enable or disable the checks.
Replace <signature ID> with the signature ID of the threat for which you want
to enable or disable checks.
To enable or disable a signature according to threat level, enter the following
command:
Syntax: ips signatures threat-level < critical | severe | minor | warning | information >
< enable | disable >
Note When you download new signatures, all signatures will be enabled, even if
they belong to threat-levels or families (or both) that you have already dis-
abled. To disable the now signatures, you must again disable the signatures
according to family or threat level.