Version 7.2 169 Mediant 1000B Gateway & E-SBC
User's Manual 13. Security
effect.
13.3.2 Configuring IDS Policies
Configuring IDS Policies is a two-stage process that includes the following tables:
1. IDS Policies (parent table): Defines a name and provides a description for the IDS
Policy. You can configure up to 20 IDS Policies.
2. IDS Rules table (child table): Defines the actual rules for the IDS Policy. Each IDS
Policy can be configured with up to 20 rules.
Note: A maximum of 100 IDS rules can be configured (regardless of how many rules
are assigned to each policy).
The device provides the following pre-configured IDS Policies that can be used in your
deployment (if they meet your requirements):
"DEFAULT_FEU": IDS Policy for far-end users in the WAN
"DEFAULT_PROXY": IDS Policy for proxy server
"DEFAULT_GLOBAL": IDS Policy with global thresholds
Note: The default IDS Policies are read-only and cannot be modified.
The following procedure describes how to configure IDS Policies through the Web
interface. You can also configure it through ini file or CLI:
IDS Policy table: IDSPolicy (ini file) or configure voip > ids policy (CLI)
IDS Rules table: IDSRule (ini file) or configure voip > ids rule (CLI)
To configure an IDS Policy:
1. Open the IDS Policies table (Setup menu > Signaling & Media tab > Intrusion
Detection folder > IDS Policies); the table displays the pre-configured IDS policies:
Figure 13-4: IDS Policies Table with Default Rules