security-intelligence
Syntax
security-intelligence {
(add-source-ip-to-feed feed-name | add-destination-ip-to-feed feed-name)
Hierarchy Level
[edit security policies from-zone zone-name to-zone zone-name policy policy-name then permit application-services] [edit security policies from-zone zone-name to-zone zone-name policy policy-name then deny application-services ] [edit security policies from-zone zone-name to-zone zone-name policy policy-name then reject application-services]
Description
Starting in Junos OS Release 20.2R1, you can add
source and destination addresses to the security intelligence (SecIntel)
profiles to generate security feeds in a security policy by configuring
the security-intelligence command. After the feeds are
generated, you can configure other security policies to use the feeds
as a dynamic-address to match designated traffic and perform
policy actions.
Options
| add-destination-ip-to-feed | Add the destination IP address to thesecurity feed. |
| add-source-ip-to-feed | Add the source IP address to the security feed. |
The feed-name must be predefined and installed by SecIntel with the feed type and a specific ID.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 20.2R1.