Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configure Global Options for Security Policies

Global options are organization-level settings that apply to all SRX Series Firewall devices within an organization. You can set up these global options for security policies by configuring default security subscriptions.

Default subscription profiles are assigned to firewall security policy rules. While you can customize these settings at the individual security policy rule level, the default profiles are applied to a security policy rule only if they are enabled for that rule.

To configure global options for security policies:

  1. Select Security > Security Policies.

    The Security Policies page is displayed.

  2. Click Global options.

    The Global Options page is displayed.

  3. Complete the configuration according to the guidelines provided in Table 1.
    Table 1: Fields on the Global Options Page
    Field Description

    Default Security Subscriptions

    You can customize the security subscription profiles at the security policy rule level, which will override the default profiles set by the global option.

    IPS profile

    Select an IPS profile to apply to policy rules.

    The selected IPS profile will be assigned to the policy rule when you enable IPS.

    Content Security profile

    Select a Content Security profile to apply to policy rules.

    The selected Content Security profile will be assigned to the policy rule when you enable Content Security.

    Decrypt profile

    Select the decrypt profile to apply to policy rules.

    The selected decrypt profile will be assigned to the policy rule when you enable Decrypt profile.

    Flow-based antivirus profile

    Select a flow-based antivirus profile to apply to policy rules.

    The selected flow-based antivirus profile will be assigned to the policy rule when you enable Flow-based AV.

    Anti-malware profile

    Select an anti-malware profile to apply to policy rules.

    The selected anti-malware profile will be assigned to the policy rule when you enable Anti-malware profile.

    SecIntel Profile Group

    Select a SecIntel profile group to apply to policy rules.

    The selected SecIntel profile group will be assigned to the policy rule when you enable SecIntel Profile Group.

    Secure web proxy

    Select a secure web proxy profile to apply to policy rules.

    The selected secure web proxy profile will be assigned to the policy rule when you enable Secure web proxy.

    ICAP redirect profile

    Select an ICAP redirect profile to apply to policy rules.

    The selected ICAP redirect profile will be assigned to the policy rule when you enable ICAP redirect profile.
  4. Click OK.

A confirmation message is displayed.

Related Documentation