Help Center Security Services IPS Policy

Contents

ContentsHide

J-Web User Guide for SRX Series Devices
- About the Documentation
- Juniper Web Device Manager
  - Getting Started
- Dashboard
  - J-Web Dashboard
    - Dashboard Overview
- Monitor
  - Interfaces
    - Monitor Interfaces
  - Logs
  - Maps and Charts
  - Statistics
  - Reports
    - About Reports Page
- Device Administration
  - Basic Settings
    - Configure Basic Settings
  - Cluster Management
  - User Management
  - Multi Tenancy—Resource Profiles
  - Multi Tenancy—Interconnect Ports
  - Multi Tenancy—Logical Systems
  - Multi Tenancy—Tenants
  - Certificate Management—Device Certificates
  - Certificate Management—Trusted Certificate Authority
  - Certificate Management—Certificate Authority Group
  - License Management
    - Manage Your Licenses
  - ATP Management
    - Enroll Your Device with Juniper ATP Cloud
    - About the Diagnostics Page
  - Operations
  - Software Management
  - Configuration Management
  - Alarm Management
    - Monitor Chassis Alarm
    - Monitor System Alarm
  - RPM
    - Setup RPM
    - View RPM
  - Tools
  - Reset Configuration
    - Configure Setup Wizard
- Network
  - Connectivity—Ports
    - About the Ports Page
    - Add a Logical Interface
    - Edit a Logical Interface
    - Delete Logical Interface
  - Connectivity—VLAN
    - About the VLAN Page
    - Add a VLAN
    - Edit a VLAN
    - Delete VLAN
    - Assign an Interface to VLAN
  - Connectivity—Link Aggregation
    - About the Link Aggregation Page
    - Link Aggregation Global Settings
    - Add a Logical Interface to Link Aggregation
    - Add a Link Aggregation
    - Edit an Aggregated Interface
    - Delete Link Aggregation
    - Search for Text in the Link Aggregation Table
  - Connectivity—PPPoE
    - Configure PPPoE
  - Connectivity—Wireless LAN
    - About the Settings Page
    - Create an Access Point
    - Edit an Access Point
    - Delete Access Point
    - Create an Access Point Radio Setting
    - Edit an Access Point Radio Setting
    - Delete Access Point Radio Settings
  - DHCP Client
    - About the DHCP Client Page
    - Add DHCP Client Information
    - Delete DHCP Client Information
  - DHCP Server
    - About the DHCP Server Page
    - Add a DHCP Pool
    - Edit a DHCP Pool
    - Delete DHCP Pool
    - DHCP Groups Global Settings
    - Add a DHCP Group
    - Edit a DHCP Group
    - Delete DHCP Group
  - Firewall Filters—IPv4
    - About the IPv4 Page
    - Add IPv4 Firewall Filters
  - Firewall Filters—IPv6
    - About the IPv6 Page
    - Add IPv6 Firewall Filters
  - Firewall Filters—Assign to Interfaces
    - About the Assign to Interfaces Page
  - NAT Policies
    - About the NAT Policies Page
    - Create a Source NAT
    - Edit a Source NAT
    - Delete Source NAT
  - NAT Pools
    - About the NAT Pools Page
    - Global Options
    - Create a Source NAT Pool
    - Edit a Source NAT Pool
    - Delete Source NAT Pool
    - Add a Destination NAT Pool
    - Edit a Destination NAT Pool
    - Delete Destination NAT Pool
  - Destination NAT
    - About the Destination Page
    - Add a Destination Rule Set
    - Edit a Destination Rule Set
    - Delete Destination Rule Set
  - Static NAT
    - About the Static Page
    - Add a Static Rule Set
    - Edit a Static Rule Set
    - Delete Static Rule Set
  - NAT Proxy ARP/ND
    - About the Proxy ARP/ND Page
    - Add a Proxy ARP
    - Edit a Proxy ARP
    - Delete a Proxy ARP
    - Add a Proxy ND
    - Edit a Proxy ND
    - Delete Proxy ND
  - Static Routing
    - About the Static Routing Page
    - Add a Static Route
    - Edit a Static Route
    - Delete Static Route
  - RIP Routing
    - About the RIP Page
    - Add a RIP Instance
    - Edit a RIP Instance
    - Delete RIP Instance
    - Edit RIP Global Settings
    - Delete RIP Global Settings
  - OSPF Routing
    - About the OSPF Page
    - Add an OSPF
    - Edit an OSPF
    - Delete OSPF
  - BGP Routing
    - About the BGP Page
    - Add a BGP Group
    - Edit a BGP Group
    - Delete a BGP Group
    - Edit Global Information
  - Routing Instances
    - About the Routing Instances Page
    - Add a Routing Instance
    - Edit a Routing Instance
    - Delete Routing Instance
  - Routing—Policies
    - About the Policies Page
    - Global Options
    - Add a Policy
    - Clone a Policy
    - Edit a Policy
    - Delete Policy
    - Test a Policy
  - Routing—Forwarding Mode
    - About the Forwarding Mode Page
  - CoS—Value Aliases
    - About the Value Aliases Page
    - Add a Code Point Alias
    - Edit a Code Point Alias
    - Delete Code Point Alias
  - CoS—Forwarding Classes
    - About the Forwarding Classes Page
    - Add a Forwarding Class
    - Edit a Forwarding Class
    - Delete Forwarding Class
  - CoS Classifiers
    - About the Classifiers Page
    - Add a Classifier
    - Edit a Classifier
    - Delete Classifier
  - CoS—Rewrite Rules
    - About the Rewrite Rules Page
    - Add a Rewrite Rule
    - Edit a Rewrite Rule
    - Delete Rewrite Rule
  - CoS—Schedulers
    - About the Schedulers Page
    - Add a Scheduler
    - Edit a Scheduler
    - Delete Scheduler
  - CoS—Scheduler Maps
    - About the Scheduler Maps Page
    - Add a Scheduler Map
    - Edit a Scheduler Map
    - Delete Scheduler Map
  - CoS—Drop Profile
    - About the Drop Profile Page
    - Add a Drop Profile
    - Edit a Drop Profile
    - Delete Drop Profile
  - CoS—Virtual Channel Groups
    - About the Virtual Channel Groups Page
    - Add a Virtual Channel
    - Edit a Virtual Channel
    - Delete Virtual Channel
  - CoS—Assign To Interface
    - About the Assign To Interface Page
    - Edit a Port
    - Add a Logical Interface
    - Edit a Logical Interface
    - Delete Logical Interface
  - Application QoS
    - About the Application QoS Page
    - Add an Application QoS Profile
    - Edit an Application QoS Profile
    - Clone an Application QoS Profile
    - Delete Application QoS Profile
    - Add a Rate Limiter Profile
    - Edit a Rate Limiter Profile
    - Clone a Rate Limiter Profile
    - Delete Rate Limiter Profile
- Security Policies and Objects
- Security Services
  - UTM Default Configuration
    - About the Default Configuration Page
    - Edit a Default Configuration
    - Delete Default Configuration
  - UTM Antivirus Profiles
    - About the Antivirus Profiles Page
    - Add an Antivirus Profile
    - Clone an Antivirus Profile
    - Edit an Antivirus Profile
    - Delete Antivirus Profile
  - UTM Web Filtering Profiles
    - About the Web Filtering Profiles Page
    - Add a Web Filtering Profile
    - Clone a Web Filtering Profile
    - Edit a Web Filtering Profile
    - Delete Web Filtering Profile
  - UTM Web Filtering Category Update
    - About the Category Update Page
    - Category Update Settings
    - Download and Install Settings
  - UTM Antispam Profiles
    - About the Antispam Profiles Page
    - Add an Antispam Profile
    - Clone an Antispam Profile
    - Edit an Antispam Profile
    - Delete Antispam Profile
  - UTM Content Filtering Profiles
    - About the Content Filtering Profiles Page
    - Add a Content Filtering Profile
    - Clone a Content Filtering Profile
    - Edit a Content Filtering Profile
    - Delete Content Filtering Profile
  - UTM Custom Objects
    - About the Custom Objects Page
    - Add a MIME Pattern List
    - Add a File Extension List
    - Add a Protocol Command List
    - Add a URL Pattern List
    - Add a URL Category List
    - Add a Custom Message List
    - Clone Custom Objects
    - Edit Custom Objects
    - Delete Custom Objects
  - UTM Policies
    - About the UTM Policies Page
    - Add a UTM Policy
    - Clone a UTM Policy
    - Edit a UTM Policy
    - Delete UTM Policy
  - IPS Signature Update
    - About the Signature Update Page
    - Download an IPS Signature
    - Install an IPS Signature
    - Check Status of the IPS Signature
    - IPS Signature Download Setting
  - IPS Sensor
    - About the Sensor Page
  - IPS Policy
    - About the Policy Page
    - IDP Policy Template
    - Check Status of the IDP Policy
    - Add an IDP Policy
    - Clone an IDP Policy
    - Edit an IDP Policy
    - Delete IDP Policy
  - ALG
    - About the ALG Page
  - Advanced Threat Prevention
    - About the Advanced Threat Prevention Page
    - Add a Threat Prevention Policy
    - Edit a Threat Prevention Policy
    - Delete Threat Prevention Policy
  - SSL Initiation Profiles
    - About the SSL Initiation Profile Page
    - Add an SSL Initiation Profile
    - Edit an SSL Initiation Profile
    - Delete SSL Initiation Profile
  - SSL Proxy Profiles
    - About the SSL Proxy Page
    - Add an SSL Proxy Profile
    - Clone an SSL Proxy Profile
    - Edit an SSL Proxy Profile
    - Delete SSL Proxy Profile
  - Firewall Authentication—Access Profile
    - About the Access Profile Page
    - Add an Access Profile
    - Edit an Access Profile
    - Delete an Access Profile
  - Firewall Authentication—Address Pools
    - About the Address Pools Page
    - Add an Address Pool
    - Edit an Address Pool
    - Delete Address Pool
    - Search for Text in an Address Pools Table
  - Firewall Authentication Settings
    - About the Authentication Settings Page
  - Firewall Authentication—UAC Settings
    - About the UAC Settings Page
  - Firewall Authentication—Active Directory
    - About the Active Directory Page
  - Firewall Authentication—Local Authentication
    - About the Local Authentication Page
    - Add a Local Auth Entry
    - Delete a Local Auth Entry
  - Firewall Authentication—Authentication Priority
    - About the Authentication Priority Page
  - Firewall Authentication—Identity Management
    - About the Identity Management Page
    - Add an Identity Management Profile
    - Edit an Identity Management Profile
    - Delete Identity Management Profile
  - ICAP Redirect
    - About the ICAP Redirect Profile Page
    - Add an ICAP Redirect Profile
    - Edit an ICAP Redirect Profile
    - Delete ICAP Redirect Profile
- VPN

ContentsHide

J-Web User Guide for SRX Series Devices
- About the Documentation
- Juniper Web Device Manager
  - Getting Started
- Dashboard
  - J-Web Dashboard
    - Dashboard Overview
- Monitor
  - Interfaces
    - Monitor Interfaces
  - Logs
  - Maps and Charts
  - Statistics
  - Reports
    - About Reports Page
- Device Administration
  - Basic Settings
    - Configure Basic Settings
  - Cluster Management
  - User Management
  - Multi Tenancy—Resource Profiles
  - Multi Tenancy—Interconnect Ports
  - Multi Tenancy—Logical Systems
  - Multi Tenancy—Tenants
  - Certificate Management—Device Certificates
  - Certificate Management—Trusted Certificate Authority
  - Certificate Management—Certificate Authority Group
  - License Management
    - Manage Your Licenses
  - ATP Management
    - Enroll Your Device with Juniper ATP Cloud
    - About the Diagnostics Page
  - Operations
  - Software Management
  - Configuration Management
  - Alarm Management
    - Monitor Chassis Alarm
    - Monitor System Alarm
  - RPM
    - Setup RPM
    - View RPM
  - Tools
  - Reset Configuration
    - Configure Setup Wizard
- Network
  - Connectivity—Ports
    - About the Ports Page
    - Add a Logical Interface
    - Edit a Logical Interface
    - Delete Logical Interface
  - Connectivity—VLAN
    - About the VLAN Page
    - Add a VLAN
    - Edit a VLAN
    - Delete VLAN
    - Assign an Interface to VLAN
  - Connectivity—Link Aggregation
    - About the Link Aggregation Page
    - Link Aggregation Global Settings
    - Add a Logical Interface to Link Aggregation
    - Add a Link Aggregation
    - Edit an Aggregated Interface
    - Delete Link Aggregation
    - Search for Text in the Link Aggregation Table
  - Connectivity—PPPoE
    - Configure PPPoE
  - Connectivity—Wireless LAN
    - About the Settings Page
    - Create an Access Point
    - Edit an Access Point
    - Delete Access Point
    - Create an Access Point Radio Setting
    - Edit an Access Point Radio Setting
    - Delete Access Point Radio Settings
  - DHCP Client
    - About the DHCP Client Page
    - Add DHCP Client Information
    - Delete DHCP Client Information
  - DHCP Server
    - About the DHCP Server Page
    - Add a DHCP Pool
    - Edit a DHCP Pool
    - Delete DHCP Pool
    - DHCP Groups Global Settings
    - Add a DHCP Group
    - Edit a DHCP Group
    - Delete DHCP Group
  - Firewall Filters—IPv4
    - About the IPv4 Page
    - Add IPv4 Firewall Filters
  - Firewall Filters—IPv6
    - About the IPv6 Page
    - Add IPv6 Firewall Filters
  - Firewall Filters—Assign to Interfaces
    - About the Assign to Interfaces Page
  - NAT Policies
    - About the NAT Policies Page
    - Create a Source NAT
    - Edit a Source NAT
    - Delete Source NAT
  - NAT Pools
    - About the NAT Pools Page
    - Global Options
    - Create a Source NAT Pool
    - Edit a Source NAT Pool
    - Delete Source NAT Pool
    - Add a Destination NAT Pool
    - Edit a Destination NAT Pool
    - Delete Destination NAT Pool
  - Destination NAT
    - About the Destination Page
    - Add a Destination Rule Set
    - Edit a Destination Rule Set
    - Delete Destination Rule Set
  - Static NAT
    - About the Static Page
    - Add a Static Rule Set
    - Edit a Static Rule Set
    - Delete Static Rule Set
  - NAT Proxy ARP/ND
    - About the Proxy ARP/ND Page
    - Add a Proxy ARP
    - Edit a Proxy ARP
    - Delete a Proxy ARP
    - Add a Proxy ND
    - Edit a Proxy ND
    - Delete Proxy ND
  - Static Routing
    - About the Static Routing Page
    - Add a Static Route
    - Edit a Static Route
    - Delete Static Route
  - RIP Routing
    - About the RIP Page
    - Add a RIP Instance
    - Edit a RIP Instance
    - Delete RIP Instance
    - Edit RIP Global Settings
    - Delete RIP Global Settings
  - OSPF Routing
    - About the OSPF Page
    - Add an OSPF
    - Edit an OSPF
    - Delete OSPF
  - BGP Routing
    - About the BGP Page
    - Add a BGP Group
    - Edit a BGP Group
    - Delete a BGP Group
    - Edit Global Information
  - Routing Instances
    - About the Routing Instances Page
    - Add a Routing Instance
    - Edit a Routing Instance
    - Delete Routing Instance
  - Routing—Policies
    - About the Policies Page
    - Global Options
    - Add a Policy
    - Clone a Policy
    - Edit a Policy
    - Delete Policy
    - Test a Policy
  - Routing—Forwarding Mode
    - About the Forwarding Mode Page
  - CoS—Value Aliases
    - About the Value Aliases Page
    - Add a Code Point Alias
    - Edit a Code Point Alias
    - Delete Code Point Alias
  - CoS—Forwarding Classes
    - About the Forwarding Classes Page
    - Add a Forwarding Class
    - Edit a Forwarding Class
    - Delete Forwarding Class
  - CoS Classifiers
    - About the Classifiers Page
    - Add a Classifier
    - Edit a Classifier
    - Delete Classifier
  - CoS—Rewrite Rules
    - About the Rewrite Rules Page
    - Add a Rewrite Rule
    - Edit a Rewrite Rule
    - Delete Rewrite Rule
  - CoS—Schedulers
    - About the Schedulers Page
    - Add a Scheduler
    - Edit a Scheduler
    - Delete Scheduler
  - CoS—Scheduler Maps
    - About the Scheduler Maps Page
    - Add a Scheduler Map
    - Edit a Scheduler Map
    - Delete Scheduler Map
  - CoS—Drop Profile
    - About the Drop Profile Page
    - Add a Drop Profile
    - Edit a Drop Profile
    - Delete Drop Profile
  - CoS—Virtual Channel Groups
    - About the Virtual Channel Groups Page
    - Add a Virtual Channel
    - Edit a Virtual Channel
    - Delete Virtual Channel
  - CoS—Assign To Interface
    - About the Assign To Interface Page
    - Edit a Port
    - Add a Logical Interface
    - Edit a Logical Interface
    - Delete Logical Interface
  - Application QoS
    - About the Application QoS Page
    - Add an Application QoS Profile
    - Edit an Application QoS Profile
    - Clone an Application QoS Profile
    - Delete Application QoS Profile
    - Add a Rate Limiter Profile
    - Edit a Rate Limiter Profile
    - Clone a Rate Limiter Profile
    - Delete Rate Limiter Profile
- Security Policies and Objects
- Security Services
  - UTM Default Configuration
    - About the Default Configuration Page
    - Edit a Default Configuration
    - Delete Default Configuration
  - UTM Antivirus Profiles
    - About the Antivirus Profiles Page
    - Add an Antivirus Profile
    - Clone an Antivirus Profile
    - Edit an Antivirus Profile
    - Delete Antivirus Profile
  - UTM Web Filtering Profiles
    - About the Web Filtering Profiles Page
    - Add a Web Filtering Profile
    - Clone a Web Filtering Profile
    - Edit a Web Filtering Profile
    - Delete Web Filtering Profile
  - UTM Web Filtering Category Update
    - About the Category Update Page
    - Category Update Settings
    - Download and Install Settings
  - UTM Antispam Profiles
    - About the Antispam Profiles Page
    - Add an Antispam Profile
    - Clone an Antispam Profile
    - Edit an Antispam Profile
    - Delete Antispam Profile
  - UTM Content Filtering Profiles
    - About the Content Filtering Profiles Page
    - Add a Content Filtering Profile
    - Clone a Content Filtering Profile
    - Edit a Content Filtering Profile
    - Delete Content Filtering Profile
  - UTM Custom Objects
    - About the Custom Objects Page
    - Add a MIME Pattern List
    - Add a File Extension List
    - Add a Protocol Command List
    - Add a URL Pattern List
    - Add a URL Category List
    - Add a Custom Message List
    - Clone Custom Objects
    - Edit Custom Objects
    - Delete Custom Objects
  - UTM Policies
    - About the UTM Policies Page
    - Add a UTM Policy
    - Clone a UTM Policy
    - Edit a UTM Policy
    - Delete UTM Policy
  - IPS Signature Update
    - About the Signature Update Page
    - Download an IPS Signature
    - Install an IPS Signature
    - Check Status of the IPS Signature
    - IPS Signature Download Setting
  - IPS Sensor
    - About the Sensor Page
  - IPS Policy
    - About the Policy Page
    - IDP Policy Template
    - Check Status of the IDP Policy
    - Add an IDP Policy
    - Clone an IDP Policy
    - Edit an IDP Policy
    - Delete IDP Policy
  - ALG
    - About the ALG Page
  - Advanced Threat Prevention
    - About the Advanced Threat Prevention Page
    - Add a Threat Prevention Policy
    - Edit a Threat Prevention Policy
    - Delete Threat Prevention Policy
  - SSL Initiation Profiles
    - About the SSL Initiation Profile Page
    - Add an SSL Initiation Profile
    - Edit an SSL Initiation Profile
    - Delete SSL Initiation Profile
  - SSL Proxy Profiles
    - About the SSL Proxy Page
    - Add an SSL Proxy Profile
    - Clone an SSL Proxy Profile
    - Edit an SSL Proxy Profile
    - Delete SSL Proxy Profile
  - Firewall Authentication—Access Profile
    - About the Access Profile Page
    - Add an Access Profile
    - Edit an Access Profile
    - Delete an Access Profile
  - Firewall Authentication—Address Pools
    - About the Address Pools Page
    - Add an Address Pool
    - Edit an Address Pool
    - Delete Address Pool
    - Search for Text in an Address Pools Table
  - Firewall Authentication Settings
    - About the Authentication Settings Page
  - Firewall Authentication—UAC Settings
    - About the UAC Settings Page
  - Firewall Authentication—Active Directory
    - About the Active Directory Page
  - Firewall Authentication—Local Authentication
    - About the Local Authentication Page
    - Add a Local Auth Entry
    - Delete a Local Auth Entry
  - Firewall Authentication—Authentication Priority
    - About the Authentication Priority Page
  - Firewall Authentication—Identity Management
    - About the Identity Management Page
    - Add an Identity Management Profile
    - Edit an Identity Management Profile
    - Delete Identity Management Profile
  - ICAP Redirect
    - About the ICAP Redirect Profile Page
    - Add an ICAP Redirect Profile
    - Edit an ICAP Redirect Profile
    - Delete ICAP Redirect Profile
- VPN

About the Policy Page

You are here: Security Services > IPS > Policy.

Use this page to configure IPS policies.

Tasks You Can Perform

You can perform the following tasks from this page:

Download, install, load and unload a template. See IDP Policy Template.
Check status of the IDP policy. See Check Status of the IDP Policy.
Set an IPS policy as default policy. To do this, select an existing IPS policy and click Set Default.
Create an IDP policy. See Add an IDP Policy.
Edit an IDP policy. See Edit an IDP Policy.
Delete an IDP policy. See Delete IDP Policy.
Clone an IDP policy. See Clone an IDP Policy.

Field Descriptions

Table 229 describes the fields on the IDP policy page.

Table 229: Fields on the IDP Policy Page

Field	Description
Policy List Note: IDP policies that are created by root users in root-logical-system are not displayed in security profile advanced settings if you have logged in as a logical system user.
Name	Displays the IDP policy name.
Type	Displays the IDP policy type.
IPS Rule Number	Displays the number of rule-based IP profiles that are configured.
Exempt Rule Number	Displays the number of rule-based exempt profiles that are configured.
Rulebase-IPS	Displays the IPS rulebase to detect attacks based on stateful signature and protocol anomalies.
Rulebase-Exempt	Displays the exempt rulebase to skip detection of a set of attacks in certain traffic.

Related Documentation

Help us to improve. Rate this article.

Feedback Received. Thank You!

Previous

About the Sensor Page

Next

IDP Policy Template

Related Topics

Need more help?

Ask questions in TechWiki

Contact Customer Support

Check documentation in TechLibrary

Rating by you:

X