Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

SRX security configuration protection-mode feature

0

0

Article ID: KB28450 KB Last Updated: 27 Dec 2013Version: 1.0
Summary:
The Junos OS software release 12.x45-D16.1 includes a new protection-mode feature set. There are four modes to efficiently inspect traffic corresponding to the protection mode in which the SRX device is operated. The four modes are Perimeter, Perimeter-Full, Datacenter, and Datacenter-Full; all can be enabled via the sensor-configuration command.
Symptoms:
How do I set the protection mode for the SRX and what modes of protection are available?
Cause:

Solution:
To set the protection mode for the SRX security configuration, use the following format:

# set security idp sensor-configuration security-configuration protection-mode <mode>


Mode options:

ModeDescription
Perimeter-FullDefault mode - This is the most secure configuration for perimeter protection.
PerimeterPerimeter configuration optimized for balanced protection and performance.
Datacenter-FullStandard for Datacenter; this is the most secure configuration for datacenter protection.
DatacenterDatacenter configuration optimized for balanced protection and performance.

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search