Working with IDP Policies

You can perform the following tasks to manage IDP policies:

• Create new IDP policies starting from scratch (see Defining Rules for an IPS Rulebase).
• Create an IDP policy starting with one of the predefined templates provided by Juniper Networks (see Using Predefined Policy Templates).
• Add or delete rules within a rulebase. You can use any of the following IDP objects to create rules:
  • Zone and network objects available in the base system
  • Predefined service objects provided by Juniper Networks
  • Custom application objects
  • Predefined attack objects provided by Juniper Networks
• Create custom attack objects (see Configuring Signature-Based Attacks).
• Update the signature database provided by Juniper Networks. This database contains all predefined objects.
• Maintain multiple IDP policies. Any one of the policies can be applied to the device.