Practical procedure and troubleshooting notes for Configuring IPS services.

1. Log in to the SonicWall firewall.

2. At the top of the page, select Policy.
   

3. In the left navigation menu, select Security Services.
   

4. In the Security Services drop-down, select Intrusion Prevention.
   

5. This will bring you to the Intrusion Prevention page.
   

6. On this page, you can configure the Intrusion Prevention Services (IPS):

   • Enable IPS
   • Select whether you would like to Prevent or Detect.
     • Recommendation: If this is your first time enabling IPS, select Detect All instead of Prevent All. This allows you to monitor traffic and ensure that critical services are not being blocked.
   • Select Accept at the bottom of the page.

7. In the Intrusion Prevention navigation menu, select Signatures.
   

8. From here, you can view all of the signatures available for detection or prevention.
   

9. Hover over a specific signature to display a pencil icon, which indicates you can edit that signature’s settings.
   

10. The Edit IPS Signature window will appear, allowing you to modify the settings for that signature.
    

11. Once you’re comfortable with your Intrusion Prevention settings, go to Object in the top navigation menu.
    

12. In the Match Objects drop-down menu, select Zones.
    

13. This will open the Zones page, where you can verify that IPS is configured for each zone.