How to switch security policy style from advance to general?

Zyxel_Emily
Zyxel_Emily Posts: 1,404  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
edited May 2024 in Security Service

If you need to switch the security policy style, follow these steps:

  1. Remove all UTM profiles except Content Filter and App Patrol from security policy rules. Ensure to de-apply the Email Security and Anti-Malware profiles in security policy rules.
  2. Verify the status using the command.
    Router(config)# show security-service inspect status
    IDP inspect: all-traffic
    Anti-Malware inspect: by-policy
    Email Security inspect: by-policy
    URL threat filter inspect: all-traffic
    DNS filter inspect: all-traffic
    IDP profile: default_profile
  3. If the status is "by-policy", use the command to configure "all-traffic".
    Router(config)# security-service anti-virus inspect all-traffic
    Router(config)#
    security-service anti-spam inspect all-traffic
    Router(config)# write
  4. Change the security policy style to general.
    Router(config)# secure-policy-style general
    Note: You may need to wait for a long time to apply this command.
    Router(config)# write
  5. Log in to the web GUI again, and you should see the IPS page in general style.

See how you've made an impact in Zyxel Community this year!
https://bit.ly/Your2024Moments_Community

Tagged: