WSM User Guide - WatchGuard Technologies

Activating Intrusion Prevention (IPS)3 From Policy Manager, select Tasks > Intrusion Prevention > Activate.The Activate Intrusion Prevention wizard starts.4 Click Next.5 Click through the wizard and add the information it asks for. The wizard shows different screensdepending on if you already have proxy policies in your configuration. I f you do not, the wizardhelps you create a proxy policy. You can then use the wizard again to configure IPS, or see theinstructions in the subsequent section. The screens are:Select proxy policies to enableThis screen shows a list of proxy policies that are already defined on your Firebox. From the list,select the proxy policies you want to enable IPS for. Any policies that have IPS already enabled aregrayed out.Create new proxy policiesThis screen shows the proxy types whose corresponding policies do not currently exist. If, forexample, you have already created an SMTP policy, it does not appear in the list.To create a policy, select the corresponding check box. If you select SMTP, enter the mail server IPaddress. This wizard creates a default SMTP policy, which is a static NAT policy. To create this defaultSMTP policy, you must have at least one external interface with a static IP address or PPPoE. Onlyone policy is created even if you have more than one external interface. The To field of the policy isa static NAT entry (the static IP address of the first external interface to the specified mail service IPaddress). If this default policy does not meet your requirements, you can create an SMTP policy inPolicy Manager before you run this wizard.Select Advanced Intrusion Prevention settings (HTTP and TCP only)If you use the wizard to add an HTTP or TCP policy, you can select protection against InstantMessaging (IM), Peer-to-Peer (P2P), and Spyware.User Guide 315