topic Re: R80.10 IPS Best Practices Guide in Firewall and Security Management

R80.10 IPS Best Practices Guide

Tomer_Sole — Tue, 06 Feb 2018 07:46:59 GMT

Hi everyone, in the following document you will find:

- What are the major changes with IPS in R80.10 Security Management and Gateway.

- How can we set up an initial IPS configuration that gets regularly updated

- How can we tune our IPS to our organization's needs.

I would like to thank Omer Shliva for his efforts on this document. We will monitor this thread for questions.

G_W_Albrecht — Tue, 06 Feb 2018 08:48:23 GMT

Thank you a lot - this really is brand new 😉

Martin_Raska — Mon, 12 Feb 2018 09:29:26 GMT

Hello,

check also:

sk43733 How to measure CPU time consumed by IPS protections

sk110737 IPS Analyzer Tool - How to analyze IPS performance efficiently

Martin

Omer_Shliva — Thu, 15 Mar 2018 07:16:54 GMT

Hi Martin,

Thank you for your comment. You can find this information on page 16 of our guide.

Daniel_Westlund — Tue, 08 May 2018 21:54:44 GMT

Is there a way in R80.10 to choose which resources IPS protects, ie, protect resources I define as internal?

Martin_Raska — Wed, 09 May 2018 06:09:01 GMT

You can do it via Threat Prevention policy with Protected scope field.

Daniel_Westlund — Thu, 10 May 2018 19:55:08 GMT

Thanks. Looks like I need to wait until I get my gateway onto R80.10 as it failed to validate that attempt for R77.30.

Martin_Raska — Fri, 11 May 2018 06:50:22 GMT

Yes, because you can have only one profile per GW in R77.30

D_W — Thu, 29 Nov 2018 07:55:30 GMT

The Link is not working.

Raj_Khatri — Tue, 23 Jul 2019 13:19:42 GMT

When will the best practice guide for R80.20 be released?