How to really disable SmartDefense ?

[suber]

Splat -NGX R62 - Smart console HF02


hello,

i have disabled on global properties smart defense but in the smart tracker i establish smart defense reject ... strange

regards,

Suber

[manrag]

You can disable Smart defense in the gateway object by checking do not apply smart defense on this gateway under smart defense.

[suber]

this is what i do ... but smart defense is still active :-(

[MarioL]

Have you pushed the policy to the firewall after that change?

[mcnallym]

Also is the traffic that is rejected, HTTP, HTTPS, FTP at all.

[suber]

yes i push the policy.

I have to check why smart defense is active for Squid_ntlm (header problem).

In the tracker, when i open the smart defense log : "smartdefense Profile: No protection" but action is reject lol

[Routerkid1]

Click on the SD tab in dashboard >Profile mgmt > create a new profile called no protection for example. Click general settings tab and choose deactivate.

Now open the firewall object click on SD and assign this new profile to the firewall and reinstall your policy.

[jmkeller]

'Disabling' SmartDefence turns off the subscription signatures, and actually will revert to the firewall module in question using the 'default' signature set that comes with the software release. Hence why you still see SmartDefence log entries.

You need to create a new profile, say "SmartDefence_disabled" and disable all the signatures. Then set the gateway to use this profile and push the policy.