<form> <field> <id>ids.general.enabled</id> <label>Enabled</label> <type>checkbox</type> <help>Enable intrusion detection system.</help> </field> <field> <id>ids.general.ips</id> <label>IPS mode</label> <type>checkbox</type> <help><![CDATA[Enable protection mode (block traffic).<br />Before enabling, please disable all hardware offloading first <a href="/system_advanced_network.php">in advanced network</a>.]]></help> </field> <field> <id>ids.general.promisc</id> <label>Promiscuous mode</label> <type>checkbox</type> <help><![CDATA[Enable promiscuous mode, for certain setups (like IPS with vlans), this is required to actually capture data on the physical interface.]]></help> </field> <field> <id>ids.general.syslog</id> <label>Enable syslog</label> <type>checkbox</type> <help><![CDATA[Enable syslog, sends alerts (in fast log format) and messages to syslog. This won't change the alert logging used by the product itself.]]></help> </field> <field> <id>ids.general.MPMAlgo</id> <label>Pattern matcher</label> <type>dropdown</type> <help><![CDATA[Select the multi-pattern matcher algorithm to use.]]></help> </field> <field> <id>ids.general.interfaces</id> <label>Interfaces</label> <type>select_multiple</type> <style>tokenize</style> <help><![CDATA[Select interface(s) to use. When enabling IPS, only use physical interfaces here (no vlans etc).]]></help> <hint>Type or select interface.</hint> </field> <field> <id>ids.general.AlertLogrotate</id> <label>Rotate log</label> <type>dropdown</type> <help><![CDATA[Rotate alert logs at provided interval.]]></help> </field> <field> <id>ids.general.AlertSaveLogs</id> <label>Save logs</label> <type>text</type> <help><![CDATA[Number of logs to keep.]]></help> </field> </form>