[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

utm

Syntax

utm {
custom-objects {
filename-extension {
value [list];
}
mime-pattern {
value [list];
}
custom-url-category {
value [list];
}
protocol-command {
value [list];
}
url-pattern {
value [list];
}
}
feature-profile {
anti-virus {
type kaspersky-lab-engine;
kaspersky-lab-engine {
pattern-update {
url;
interval value;
}
profile profile-name {
fallback-options {
default (log-and-permit | block);
corrupt-file (log-and-permit | block);
password-file (log-and-permit | block);
decompress-layer (log-and-permit | block);
content-size (log-and-permit | block);
engine-not-ready (log-and-permit | block);
timeout (log-and-permit | block);
out-of-resources (log-and-permit | block);
too-many-requests (log-and-permit | block);
}
scan-options {
intelligent-prescreening;
scan-mode (scan-all | by--extension);
content-size-limit value;
timeout value;
decompress-layer-limit value;
}
notification-options {
virus-detection {
type (message | protocol-only);
notify-mail-sender;
custom-message;
}
fallback-block {
custom-message;
notify-mail-sender;
type;
}
}
trickling {
timeout value;
}
}
}
type juniper-express-engine;
juniper-express-engine {
pattern-update {
url;
interval value;
}
profile profile-name {
fallback-options {
default (log-and-permit | block);
content-size (log-and-permit | block);
engine-not-ready (log-and-permit | block);
timeout (log-and-permit | block);
out-of-resources (log-and-permit | block);
too-many-requests (log-and-permit | block);
}
scan-options {
intelligent-prescreening;
scan-mode (scan-all | by--extension);
content-size-limit value;
timeout value;
decompress-layer-limit value;
}
notification-options {
virus-detection {
type (message | protocol-only);
notify-mail-sender;
custom-message;
}
fallback-block {
custom-message;
notify-mail-sender;
type;
}
}
trickling {
timeout value;
}
}
mime-whitelist {
list listname {
exception listname;
}
url-whitelist {
listname;
}
}
}
web-filtering {
surf-control-integrated {
cache {
timeout value;
}
server {
host host-name;
port number;
}
profile profile-name{
default (log-and-permit | block);
custom-block-message value;
fallback-settings {
default (log-and-permit | block);
server-connectivity (log-and-permit | block);
timeout (log-and-permit | block);
too-many-requests (log-and-permit | block);
}
category customurl-list name {
action (log-and-permit | block);
}
}
websense-redirect {
profile profile-name {
server {
host host-name;
port number;
}
sockets value;
timeout value;
fallback-settings {
default (log-and-permit | block);
server-connectivity (log-and-permit | block);
timeout (log-and-permit | block);
too-many-requests (log-and-permit | block);
}
}
url-whitelist {
listname;
}
url-blacklist {
listname;
}
}
anti-spam {
symantec-sbl {
profile profile-name{
sbl-default-server;
spam-action (log-and-permit | block);
custom-tag-string [***SPAM***];
}
address-whitelist{
listname;
}
}
}
content-filtering {
profile profile-name{
block-command protocol-command-list;
block-content-type (java-applet | exe | http-cookie);
block-mime {
list list-name {
exception list-name;
}
}
permit-command protocol-command-list;
notification-options {
type (message | protocol-only);
custom-message [message];
}
}
}
utm-policy policy-name {
anti-virus {
http-profile profile-name;
ftp {
upload-profile profile-name;
download-profile profile-name;
}
smtp-profile profile-name;
pop3-profile profile-name;
imap-profile profile-name;
}
content-filtering {
http-profile profile-name;
ftp {
upload-profile profile-name;
download-profile profile-name;
}
smtp-profile profile-name;
pop3-profile profile-name;
imap-profile profile-name;
}
anti-spam {
smtp-profile profile-name;
}
web-filtering {
http-profile profile-name;
}
traffic-options {
sessions-per-client {
limit value;
over-limit (log-and-permit | block);
}
}
}
}

Hierarchy Level

[edit security]

Release Information

Statement introduced in Release 9.5 of JUNOS software.

Description

Configure UTM features.

This statement is supported on SRX 210, SRX 240, SRX 650, and J-series devices.

Options

The remaining statements are explained separately.

Usage Guidelines

For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]