Working with IDP Policies

You can perform the following tasks to manage IDP policies:

Create new IDP policies starting from scratch (see Defining Rules for an IPS Rulebase).
Create an IDP policy starting with one of the predefined templates provided by Juniper Networks (see Using Predefined Policy Templates).
Add or delete rules within a rulebase. You can use any of the following IDP objects to create rules:
- Zone and network objects available in the base system
- Predefined service objects provided by Juniper Networks
- Custom application objects
- Predefined attack objects provided by Juniper Networks
Create custom attack objects (see Configuring Signature-Based Attacks).
Update the signature database provided by Juniper Networks. This database contains all predefined objects.
Maintain multiple IDP policies. Any one of the policies can be applied to the device.