Optimize vs Recommended Protection

[Jason_Dance]

Hi all.

Does anyone have a good document describing the differences in the default IPS profiles in R80.x?  I use Recommended Protection on my R77.x gateways, but now I've upgraded management to R80 I was wondering if there was a benefit to changing tot he optimized profile on my R77.x gateways.

-Jason

[PhoneBoy]

From the documentation: 

SmartConsole includes these default Threat Prevention profiles:

• Optimized - Provides excellent protection for common network products and protocols against recent or popular attacks
• Strict - Provides a wide coverage for all products and protocols, with impact on network performance
• Basic - Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance

Optimized is the default in R80.x and generally only enables signatures that don't have critical performance impact.

Strict enables almost all signatures. 

[Jason_Dance]

Thanks Dameon.

How does the Optimized profile differ from the Recommended Protection profile?

-Jason

[PhoneBoy]

Basic has a few more protections enabled than Default, but is designed to have minimal performance impact.

Strict has more protections enabled than Recommended--almost all of them, in fact--and will have a performance impact.

Optimized has less protections enabled than Recommended, providing a good balance between performance and security.