direction (Dynamic Attack Group)

direction { values [any | client-to-server | exclude-any | exclude-client-to-server | exclude-server-to-client | server-to-client]; }

[edit security idp dynamic-attack-group dynamic-attack-group-name filters]

Statement introduced in Release 9.3 of Junos OS.

Specify a direction filter to add predefined attacks to the dynamic group based on the direction specified in the attacks.

values—Name of the direction filter. You can select from the following directions:

any—Monitors traffic from client to server and server to client.
client-to-server—Monitors traffic only from client to server (most attacks occur over client-to-server connections).
exclude-any—Allows traffic from client to server and server to client.
exclude-client-to-server—Allows traffic only from client to server.
exclude-server-to-client—Allows traffic only from server-to-client.
server-to-client—Monitors traffic only from server-to-client.

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.