Creating an IPS sensor
Most IPS settings are configured in an IPS sensor. IPS sensors are selected in firewall policies. This way, you can create multiple IPS sensors, and tailor them to the traffic controlled by the security policy in which they are selected. In this example, you will create one IPS sensor.
To create an IPS sensor— web-based manager
1. Go to Security Profiles > Intrusion Protection > IPS Sensors.
2. Select the Create New icon in the top of the Edit IPS Sensor window.
3. In the Name field, enter basic_ips.
4. In the Comments field, enter IPS protection for Windows clients.
5. Select OK.
6. Select the Create New drop-down to add a new component to the sensor and for the Sensor Type choose Filter Based.
7. In the Filter Options choose the following:
a. For Severity: select all of the options
b. For Target: select Client only.
c. For OS: select Windows only.
8. For the Action leave as the default.
9. Select OK to save the filter.
10. Select OK to save the IPS sensor.
To create an IPS sensor — CLI
config ips sensor
edit basic_ips
set comment "IPS protection for Windows clients"
config entries
edit 1
set location client
set os windows
end
end