TechLibrary

Navigation

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

Example: Configuring IDP Protocol Decoders

This example shows how to configure IDP protocol decoder tunables.

Requirements

Before you begin, review the IDP protocol decoders feature. See Understanding IDP Protocol Decoders.

Overview

The Junos IDP module ships with a set of preconfigured protocol decoders. These protocol decoders have default settings for various protocol-specific contextual checks that they perform. You can use the default settings or tune them to meet your site's specific needs. This example shows you how to tune the protocol decoder for FTP.

Configuration

Step-by-Step Procedure

To configure IDP protocol decoder tunables:

View the list of protocols that have tunable parameters.
[edit]user@host# edit security idp sensor-configuration detector protocol-name FTP
Configure tunable parameters for the FTP protocol.
[edit security idp sensor-configuration-detector protocol-name FTP]user@host# set tunable-name sc_ftp_failed_logins tunable-value 4user@host# set tunable-name sc_ftp_failed_flags tunable value 1user@host# set tunable-name sc_ftp_line_length tunable-value 1024user@host# set tunable-name sc_ftp_password_length tunable-value 64user@host# set tunable-name sc_ftp_sitestring_length tunable-value 512user@host# set tunable-name sc_ftp_username_length tunable-value 32
If you are done configuring the device, commit the configuration.
[edit]user@host# commit

Verification

To verify the configuration is working properly, enter the show security idp status command.