Chapter 21 IDP
NXC5200 User’s Guide
316
21.5.2 IDP Service Groups
An IDP service group is a set of related packet inspection signatures.
The following figure shows the WEB_PHP service group that contains signatures
related to attacks on web servers using PHP exploits. PHP (PHP: Hypertext
Preprocessor) is a server-side HTML embedded scripting language that allows web
developers to build dynamic websites.
Logs and actions applied to a service group apply to all signatures within that
group. If you select original setting for service group logs and/or actions, all
signatures within that group are returned to their last-saved settings.
Figure 140
Configuration > Anti-X > IDP > Edit Profile
Table 117
IDP Service Groups
WEB_PHP WEB_MISC
WEB_IIS
WEB_FRONTPAGE
WEB_CGI WEB_ATTACKS
TFTP
TELNET
SQL SNMP
SMTP RSERVICES
RPC POP3
POP2 P2P
ORACLE NNTP
NETBIOS MYSQL
MISC_EXPLOIT MISC_DDOS
MISC_BACKDOOR MISC
IMAP IM
ICMP
FTP
FINGER DNS