IDS exceptions

IDS exceptions can be used to customize Personal firewall behavior when IDS detections occur. By adding an IDS exception, you can specify whether to block malicious activities, show a notification or log information about malicious activities. All exceptions can be viewed from Advanced setup under Network > Personal firewall > IDS exceptions.

Columns

Alert Type of alert.

Application – Name of excepted application.

Remote IP – A list of remote IPv4 or IPv6 address. Multiple addresses must be delimited by a comma.

Block Every system process has its own default behavior and assigned action (block or allow). To override default behavior for a particular application, select block or allow from the drop-down menu.

Notify – Default/Yes/No.

Log – Default/Yes/No.

Control elements

Add/Edit/Remove – Manage IDS exceptions.

Top/Up/Down/Bottom – Moves an exception up/down on the list. If there are multiple exceptions for the same IP address or application, the first exception listed for that application will be applied. Exceptions are applied for each action type (block, notify, log) separately.

icon_details_hoverNOTE

For example, to create an IDS exception that uses the Default action from the Block drop-down menu, displays a notification and collects a log any time an event occurs, set the Notify and Log drop-down menus to Yes.

CONFIG_IDS_EXCEPTIONS