Create Profiles:
When you create a new profile, the following options can help you to target specific deployments and leverage existing profiles:
- Deployment Mode
- Inheritance
Deployment Mode: Digital Vaccines contain deployment settings for filters that address specific types of deployments, such as perimeter, core, datacenter, etc.). When you create a new profile, you can use the default deployment mode or choose from a list of recommended deployment modes. The Deployment Mode setting is available only for Digital Vaccine versions that support this option.
Inheritance: Profiles can be set up with a hierarchy and profile attributes can be inherited. Profiles with inherited setting CANNOT be edited if the main profile is locked. For each profile in the hierarchy, the following items can be inherited from the profile in the next level up:
- Application and Infrastructure Restrictions/Exceptions
- Performance Protection Restrictions
- Reputation Exceptions
- Category settings
- Filters from the DV, Auxiliary DV and Custom Packages
- Advanced DDoS filters
- Traffic Thresholds filters
- Reputation filters
- Traffic Management filters
Note: If a filter has inherited settings and the base filter is locked, the filter with inherited settings CANNOT be edited.
How To: Common Task
- Log in to the SMS from a client.
- On the top Navigation menu click Profiles.
- On the left Navigation menu select Inspection Profiles. The Inspection Profiles screen displays.
How To: Create a New Profile
- Do one of the following:
- From the Inspection Profiles area, click New.
- On the Menu Bar, select the File -> New -> Inspection Profile... menu item.
- Right-click an entry in the Profile Inventory table and click New.
- In the Profiles - Create New Profile screens, enter the following information for the profile:
- Name - unique name for the profile (Note: do not use special characters for the profile name.)
- Deployment Mode - option to choose a type of deployment.
- Capture Additional Event Information (if required)
- Client IP (X-Forwarded-For & True-Client-IP)
- HTTP Context (Hostname, URI, Method)
- Inheritance - option to choose a profile for inherited settings.
- Description - a brief description for the profile.
- Click OK.
How To: Use the "Save As" Option to Copy a Profile
- Select a profile from the inventory.
- Do one of the following:
- From the Inspection Profiles area select the profile you wish to copy and click Save As.
- Right-click and entry in the Inspection Profiles table and click Save As.
- The Save Profile As dialog box displays. The selected profile is copied with "Copy of" and the name appended of the original as the profile name. This copied profile includes all filters of the original profile.
- Enter a Name. The default name is "Copy of" added to the copied profile name. (Note: do not use special characters for the profile name.)
- For Inheritance, select Profile and specify profile for inherited settings
- Enter a Description.
- Click OK.
Reference: SMS User Guide