Juniper IDP 测试license 申请,数据库安装,调用;日志服务器调用IDP日志
2018-02-07 16:24
405 查看
License申请:
admin@SRX3600> request system license update trial
更新特征库要求配置中已有DNS配置,正确的时间配置,下载的URL
security {
idp {
security-package {
url https://services.netscreen.com/cgi-bin/index.cgi;
}
}
需要先更新特征库,再完成全局配置
1、 下载特征库
admin@SRX3600> request security idp security-package download
2、更新
admin@SRX3600> request security idp security-package install
IPS配置方法:
IDP对应的规则:(全局 )
set security idp idp-policy IDP_Default rulebase-ips rule 1 match from-zone any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match source-address any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match to-zone any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match destination-address any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match application default
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Critical - IP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Critical - TCP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Major - TCP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Major - IP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 then action no-action
set security idp idp-policy IDP_Default rulebase-ips rule 1 then notification log-attacks alert
set security idp active-policy IDP_Default
在具体的策略中调用,例如:
set security policies from-zone trust to-zone untrust policy t-u-1 match source-address any
set security policies from-zone trust to-zone untrust policy t-u-1 match destination-address any
set security policies from-zone trust to-zone untrust policy t-u-1 then permit application-services idp
日志查看:
如果直接在设备中查看IDP log,需要做两步操作:
1、
security {
log {
mode event;
event-rate 1500;
}
}
日志从data-plane转发到control-plane
2、增加IDP_log文件记录IDP信息
set system syslog file IDP_log any any
set system syslog file IDP_log match RT_IDP
set system syslog file IDP_log archive size 10m
set system syslog file IDP_log archive files 10
admin@SRX3600> request system license update trial
更新特征库要求配置中已有DNS配置,正确的时间配置,下载的URL
security {
idp {
security-package {
url https://services.netscreen.com/cgi-bin/index.cgi;
}
}
需要先更新特征库,再完成全局配置
1、 下载特征库
admin@SRX3600> request security idp security-package download
2、更新
admin@SRX3600> request security idp security-package install
IPS配置方法:
IDP对应的规则:(全局 )
set security idp idp-policy IDP_Default rulebase-ips rule 1 match from-zone any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match source-address any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match to-zone any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match destination-address any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match application default
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Critical - IP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Critical - TCP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Major - TCP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Major - IP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 then action no-action
set security idp idp-policy IDP_Default rulebase-ips rule 1 then notification log-attacks alert
set security idp active-policy IDP_Default
在具体的策略中调用,例如:
set security policies from-zone trust to-zone untrust policy t-u-1 match source-address any
set security policies from-zone trust to-zone untrust policy t-u-1 match destination-address any
set security policies from-zone trust to-zone untrust policy t-u-1 then permit application-services idp
日志查看:
如果直接在设备中查看IDP log,需要做两步操作:
1、
security {
log {
mode event;
event-rate 1500;
}
}
日志从data-plane转发到control-plane
2、增加IDP_log文件记录IDP信息
set system syslog file IDP_log any any
set system syslog file IDP_log match RT_IDP
set system syslog file IDP_log archive size 10m
set system syslog file IDP_log archive files 10
相关文章推荐
- CITRIX安装成功后,通过CPS调用应用程序报错500无法连接LICENSE服务器解决方法
- Sql2012如何将远程服务器数据库及表、表结构、表数据导入本地数据库 自定义日志记录功能,按日记录,很方便 C#常量和字段以及各种方法的语法总结 类型,对象,线程栈,托管堆在运行时的关系,以及clr如何调用静态方法,实例方法,和虚方法 asp.net webapi 自定义身份验证
- centos6.4下反向代理服务器squid安装,配置,日志管理,监控及压力测试
- MySQL安装自带的测试数据库
- SQ2000提示:安装程序配置服务器失败。参考服务器错误日志和C:\WINNT\sqlstp.log
- java.lang.ClassNotFoundException: com.microsoft.jdbc.sqlserver.SQLServerDriver Eclipse3.1 数据库连接测试程序(SQL Server 2000 Driver for JDBC Service Pack 3 安装测试)
- 收缩并截断SQLSERVER服务器上所有数据库日志
- 数据库-Oracle【Oracle服务器的安装 】
- 把juniper防火墙的日志发送到指定的syslog服务器上去
- Java连接PostgreSQL数据库(安装环境 + 简易测试代码)
- 灾难:正式数据库和测试测试数据库在一台服务器
- sql中如何调用另一台服务器的数据库查询数据呢?
- 开发工具,数据库,服务器的安装配置
- 微软超融合私有云测试32-SCCM2016部署之SCCM管理服务器安装
- 测试环境搭建之在CentOS 7上安装Nginx服务器
- 不安装数据库连接远程服务器
- ASP 调用带返回参数和记录集的存储过程二次访问数据库服务器的解决办法
- 我的服务器开发之路-安装mysql之mariadb并更改数据库路径
- SQL Server安装问题 mof 编译器无法连接到wmi服务器 不能在控件上调用Invoke或 BeginInvoke
- 在2003服务器安装数据库遇见的问题