How to switch security policy style from advance to general?

Zyxel_Emily
Posts: 1,413
Zyxel Employee





If you need to switch the security policy style, follow these steps:
- Remove all UTM profiles except Content Filter and App Patrol from security policy rules. Ensure to de-apply the Email Security and Anti-Malware profiles in security policy rules.
- Verify the status using the command.
Router(config)# show security-service inspect status
IDP inspect: all-traffic
Anti-Malware inspect: by-policy
Email Security inspect: by-policy
URL threat filter inspect: all-traffic
DNS filter inspect: all-traffic
IDP profile: default_profile - If the status is "by-policy", use the command to configure "all-traffic".
Router(config)# security-service anti-virus inspect all-traffic
Router(config)# security-service anti-spam inspect all-traffic
Router(config)# write - Change the security policy style to general.
Router(config)# secure-policy-style general
Note: You may need to wait for a long time to apply this command.
Router(config)# write - Log in to the web GUI again, and you should see the IPS page in general style.
Tagged:
0
Categories
- All Categories
- 416 Beta Program
- 2.5K Nebula
- 160 Nebula Ideas
- 108 Nebula Status and Incidents
- 5.9K Security
- 330 USG FLEX H Series
- 286 Security Ideas
- 1.5K Switch
- 78 Switch Ideas
- 1.2K Wireless
- 42 Wireless Ideas
- 6.6K Consumer Product
- 259 Service & License
- 400 News and Release
- 86 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.8K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 85 About Community
- 80 Security Highlight