[Contents] [Prev] [Next] [Index] [Report an Error]

Understanding IDP Policy Rulebases

IDP policies are collections of rules and rulebases. A rulebase is an ordered set of rules that use a specific detection method to identify and prevent attacks.

Before You Begin
For background information, read: Introducing JUNOS Software for J-series Services Routers IDP Policies Overview

Before You Begin

For background information, read:

Rules are instructions that provide context to detection mechanisms by specifying which part of the network traffic the IDP system should look in to find attacks. When a rule is matched, it means that an attack has been detected in the network traffic, triggering the action for that rule. The IDP system performs the specified action and protects your network from that attack.

Each rulebase can have multiple rules—you determine the sequence in which rules are applied to network traffic by placing them in the desired order. Each rulebase in the IDP system uses specific detection methods to identify and prevent attacks. JUNOS software supports two types of rulebases—intrusion prevention system (IPS) rulebase and exempt rulebase.

This topic covers:

[Contents] [Prev] [Next] [Index] [Report an Error]