Support Support Downloads Knowledge Base Apex Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SRX] How to obtain details about an Application Firewall Signature

0

0

Article ID: KB31089 KB Last Updated: 19 Aug 2016Version: 1.0
Summary:

This article explains how to obtain details about an application firewall signature.

Symptoms:

Before using a particular signature, you may want to review the details regarding a particular application-firewall. This can be done easily on the device itself.

Cause:

Solution:
If the application you are looking for is a single application or a nested-application, use the command, 'show services application-identification application detail <signature-name>'.

labroot> show services application-identification application detail junos:FACEBOOK-ACCESS
Application Name: junos:FACEBOOK-ACCESS
Application type: FACEBOOK-ACCESS
Description: This signature detects requests to Facebook.com, a social networking Web site.
Application ID: 244
Disabled: No
Number of Parent Group(s): 1
Application Groups:
junos:web:social-networking:facebook
Application Tags:
characteristic : Loss of Productivity
characteristic : Supports File Transfer
characteristic : Known Vulnerabilities
characteristic : Capable of Tunneling
characteristic : Can Leak Information
risk : 5
subcategory : Social-Networking
category : Web
Over List:
SSL / 199
SPDY / 1469
HTTPS / 68
HTTP / 67
AKAMAI-SSL / 1284
Alias List:
junos:FACEBOOK-CDN-SSL
junos:FACEBOOK-ACCESS-SSL
Port Mapping:
Default ports: N/A
Signature:
Port range: N/A
Client-to-server
Order: 3
labroot>

If the signature is a group signature, then use the command 'show services application-identification group detail <signature-group name>'  to check the details for the signature.

labroot> show services application-identification group detail junos:infrastructure:anti-virus
Group Name: junos:infrastructure:anti-virus
Group ID: 90
Description: N/A
Disabled: No
Number of Applications: 8
Number of Sub-Groups: 0
Number of Parent-Groups: 1
Applications:
junos:ESET-ONLINE-SCANNER-DOWNLOAD
junos:PANDA-CLOUD-CLEANER-USERAGENT
junos:PANDA-CLOUD-CLEANER-DOWNLOAD
junos:BITDEFENDER-QUICKSCAN
junos:TRENDMICRO-HOUSECALL-SSL
junos:ESET-ONLINE-SCANNER
junos:ESET-UPDATE
junos:TRENDMICRO-ACTIVE-UPDATE
Parent Groups:
junos:infrastructure

labroot>

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search