Comodo Dome Firewall

• Introduction To Dome Firewall Central Manager
  • Sign-up For Firewall Central Manager
  • Setup Dome Firewall Central Manager
  • Integrate Central Manager With Comodo One / Comodo Dragon / ITarian
  • Login To The Admin Console
  • Change Password
  • Add Organizations
  • Enroll Dome Firewall Devices
• The Main Interface
• The Dashboard
  • View Details Of A Firewall Device
  • Quick Actions On A Firewall Device
    • Backup/Restore A Firewall Device
    • Configure SSH Access For A Firewall Device
    • Network Configuration
  • Access Admin Console Of A Firewall Device
• Manage System Status And General Configuration
  • Update Firmware Version
  • View And Upgrade Central Manager License
  • View Management Tasks
• Customer Management
  • Manage Organizations
  • Activate Firewall Licenses
• Approve Firewall Device Enrollment
• Add Interfaces
• Firewall Management
  • Configure Firewall Policy Rules
  • Manage Firewall Address Objects
  • Manage Firewall Object Groups
  • Configure Destination Network Address Translation Rules
  • Configure Source Network Address Translation Rules
  • Configure System Access Rules
• Configure Virtual Private Network Settings
  • Configure IPSec/L2TP Users
  • IPSec Configuration
  • Configure L2TP Server
• Manage Advanced Threat Protection Profiles
• Manage URL And Content Filtering Profiles
• Intrusion Prevention
  • Configure The Intrusion Prevention System
  • Manage IPS Rulesets
  • Manage Application Identification Rulesets
• About Comodo Security Solutions

Manage IPS Rulesets

 

• Click 'Intrusion Prevention' > 'IPS Rules' in the left-hand menu

• The 'IPS Rules' interface displays a list of currently loaded IPS rulesets for the selected organization or device.

• You can enable/disable rulesets and configure them to allow/block packets as required.

• These settings will be applied to devices when you choose the 'default' IPS profile in the 'Content Flow Check' section of a firewall rule.
  

• See Content Flow Check Settings if you want more advice on this.

To configure IPS Rulesets

• Click 'Intrusion Prevention' > 'IPS Rules'

• Select the organization/device from the drop-down in the title bar

• A default profile applied to an organization will apply to all devices in the organization.

• A default profile applied to an individual device will apply only to the device in question.

IPS Rule List - Column Descriptions
Column	Description
Rule filename	The label of the ruleset.
Rules count	The number of constituent rules in the rule set.
Actions	Displays control buttons for the ruleset. / -  Indicates whether the ruleset is enabled or disabled. Click on the icon to switch states. See Enable/Disable rulesets for more details. / - Rule action.Can be 'Alert' or 'Drop'. Click the icon to switch between 'Alert' and 'Drop' actions. See Change application policy of rulesets for more details.

Enable/Disable rulesets

Rulesets can be enabled or disabled individually or collectively:

• Enable a single ruleset - Click the  icon in the 'Actions' column

• Disable a single ruleset - Click the  icon in the 'Actions' column

• Multiple rulesets - Select rulesets using the check-boxes on the left. Click the 'Enable' or 'Disable' button as required.

Any changes will be saved to the default profile and immediately applied to devices on which the profile is active.

Rule actions

 

Rule actions are the responses you want the firewall to take if the conditions of a rule are met. There are two options:

• Alert Policy - Will allow the packet to pass and will generate an alert. An alert policy is indicated by a yellow triangle in the 'Actions' column -

• Drop Policy - Will block the data packet without generating an alert. A drop policy is indicated by a shield icon in the 'Actions' column -

Any changes will be saved to the default profile and immediately applied to devices on which the profile is active.