Related Documentation
- J Series
- IDP Policies Overview
- Understanding IDP Policy Rules
- Understanding IDP Policy Rulebases
- Example: Configuring IDP Applications and Services
- SRX Series
- IDP Policies Overview
- Understanding IDP Policy Rules
- Understanding IDP Policy Rulebases
- Example: Configuring IDP Applications and Services
- Additional Information
- Junos OS Feature Support Reference for SRX Series and J Series Devices
Understanding IDP Application Sets
Applications or services represent Application Layer protocols that define how data is structured as it travels across the network. Because the services you support on your network are the same services that attackers must use to attack your network, you can specify which services are supported by the destination IP to make your rules more efficient. Juniper Networks provides predefined applications and application sets that are based on industry-standard applications. If you need to add applications that are not included in the predefined applications, you can create custom applications or modify predefined applications to suit your needs.
You specify an application, or service, to indicate that a policy applies to traffic of that type. Sometimes the same applications or a subset of them can be present in multiple policies, making them difficult to manage. Junos OS allows you to create groups of applications called application sets.
Application sets simplify the process by allowing you to manage a small number of application sets, rather than a large number of individual application entries.
The application (or application set) is configured as a match criterion for packets. Packets must be of the application type specified in the policy for the policy to apply to the packet. If the packet matches the application type specified by the policy and all other criteria match, then the policy action is applied to the packet. You can use predefined or custom applications and refer to them in a policy.
Related Documentation
- J Series
- IDP Policies Overview
- Understanding IDP Policy Rules
- Understanding IDP Policy Rulebases
- Example: Configuring IDP Applications and Services
- SRX Series
- IDP Policies Overview
- Understanding IDP Policy Rules
- Understanding IDP Policy Rulebases
- Example: Configuring IDP Applications and Services
- Additional Information
- Junos OS Feature Support Reference for SRX Series and J Series Devices
