Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents

show services web-filter secintel-policy status

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show services web-filter secintel-policy status
 profile  profile-name
 template  template-name

Description

Display the IPv4 and IPv6 count per threat level received from the C&C feed from Policy Enforcer. It also displays the count of the number of terms used in the implicit filter per threat level.

Options

profile-name

Name of the profile

template-name

Name of the template

Required Privilege Level

view

Sample Output

show services web-filter secintel-policy status

content_copy zoom_out_map
user@host> show services web-filter secintel-policy status profile 
URL Filtering SecIntel Policy Status:
Profile     : Profile1
C&C DB File : /var/db/url-filterd/urlf_si_cc_db.txt
Policy State: Ready
DB File Change Time : Tue Nov 27 11:01:10 2018
DB File Load Time   : Tue Nov 27 11:01:38 2018
C&C Prefix Count    : IPv4: 11093      IPv6: 5
Filters:
Threat level   Action       v4 Term Count    IPv4        v6 Term Count   IPv6
 
1              ACCEPT       23            1129         1               2         
2              ACCEPT       11            1444         0               0         
3              ACCEPT       6             996          0               0         
4              ACCEPT       7             564          0               0         
5              ACCEPT       7             451          0               0         
6              ACCEPT       4             126          0               0         
7              LOG          5             175          0               0         
8              DROP AND LOG 4             396          1               1         
9              ACCEPT       2             164          0               0         
10             ACCEPT       33            5601         1               2 

content_copy zoom_out_map
user@host> show services web-filter secintel-policy-status profile Profile1 url-filter-template template200 
Template    : template200
       C&C DB File : /var/db/url-filterd/urlf_si_ip_white_list_db.txt
       Policy State: NA
       DB File Change Time : NA
       DB File Load Time   : NA
       C&C Prefix Count    : IPv4: 0          IPv6: 0
 
       C&C DB File : /var/db/url-filterd/urlf_si_ip_black_list_db.txt
       Policy State: NA
       DB File Change Time : NA
       DB File Load Time   : NA
       C&C Prefix Count    : IPv4: 0          IPv6: 0
 
       C&C DB File : /var/db/url-filterd/urlf_si_ip_custom_db.txt
       Policy State: Ready
       DB File Change Time : Tue Feb 04 15:22:20 2020
       DB File Load Time   : Tue Feb 04 15:24:29 2020
       C&C Prefix Count    : IPv4: 16         IPv6: 0
       Filters:
       Threat level   Action              v4 Term Count    IPv4        v6 Term Count   IPv6
 
       0             ACCEPT AND SAMPLE       0             0              0            0      
       255           DROP AND SAMPLE         0             0              0            0      
       1             DROP AND SAMPLE         1             11             0            0      
       2             ACCEPT                  0             0              0            0      
       3             DROP AND SAMPLE         1             1              0            0      
       4             DROP AND SAMPLE         1             1              0            0      
       5             ACCEPT                  0             0              0            0      
       6             ACCEPT                  1             1              0            0      
       7             ACCEPT                  1             1              0            0      
       8             DROP AND SAMPLE         0             0              0            0      
       9             ACCEPT                  1             1              0            0      
       10            DROP AND SAMPLE         0             0              0            0      

show services web-filter secintel-policy status profile

To display GeoIP feed, allowlist and blocklist.

content_copy zoom_out_map
user@host> show services web-filter secintel-policy status profile Profile1
URL Filtering SecIntel Policy Status:
Profile     : Profile1
C&C DB File : /var/db/url-filterd/urlf_si_ip_global_db.txt
Policy State: Ready
DB File Change Time : Mon Nov 29 15:24:53 2021
DB File Load Time   : Mon Nov 29 15:25:09 2021
C&C Prefix Count    : IPv4: 151768     IPv6: 1
Filters:
Threat level   Action              v4 Term Count    IPv4        v6 Term Count   IPv6
 
 1             ACCEPT                  2             518            1            1      
 2             ACCEPT                  35            8645           0            0      
 3             ACCEPT                  30            7038           0            0      
 4             ACCEPT                  41            10985          0            0      
 5             ACCEPT                  2             361            0            0      
 6             ACCEPT                  390           116291         0            0      
 7             ACCEPT                  7             1663           0            0      
 8             LOG AND SAMPLE          11            1852           0            0      
 9             ACCEPT                  9             520            0            0      
 10            ACCEPT                  15            3895           0            0      
 
 
Global WL DB File : /var/db/url-filterd/urlf_si_ip_white_list_db.txt
DB File Change Time : Wed Nov 24 16:52:28 2021
DB File Load Time   : Mon Nov 29 15:25:09 2021
Global WL Prefix Count  : IPv4: 24         IPv6: 0
 
Global BL DB File : urlf_si_ip_global_bl_list_db.txt
DB File Change Time : Wed Nov 24 16:52:28 2021
Global BL Prefix Count  : IPv4: 1          IPv6: 0
 
    
 
Template    : template1
       C&C DB File : /var/db/url-filterd/urlf_si_ip_white_list_db.txt
       Policy State: NA
       DB File Change Time : NA
       DB File Load Time   : NA
       C&C Prefix Count    : IPv4: 0          IPv6: 0
 
       C&C DB File : /var/db/url-filterd/urlf_si_ip_black_list_db.txt
       Policy State: NA
       DB File Change Time : NA
       DB File Load Time   : NA
       C&C Prefix Count    : IPv4: 0          IPv6: 0
 
       C&C DB File : /var/db/url-filterd/urlf_si_ip_custom_db.txt
       Policy State: NA
       DB File Change Time : NA
       DB File Load Time   : NA
       C&C Prefix Count    : IPv4: 0          IPv6: 0
       Filters:
       Threat level   Action              v4 Term Count    IPv4        v6 Term Count   IPv6
 
       0             ACCEPT AND SAMPLE       0             0              0            0      
       255           DROP AND SAMPLE         0             0              0            0      
       1             ACCEPT                  0             0              0            0      
       2             ACCEPT                  0             0              0            0      
       3             ACCEPT                  0             0              0            0      
       4             ACCEPT                  0             0              0            0      
       5             ACCEPT                  0             0              0            0      
       6             ACCEPT                  0             0              0            0      
       7             ACCEPT                  0             0              0            0      
       8             ACCEPT                  0             0              0            0      
       9             ACCEPT                  0             0              0            0      
       10            ACCEPT                  0             0              0            0      
    
 
GeoIP    :
       GeoIP DB File : /var/db/url-filterd/urlf_si_ip_geo_db.txt
       Policy State: Ready
       DB File Change Time : Sat Nov 27 18:07:00 2021
       DB File Load Time   : Sat Nov 27 18:09:01 2021
       GeoIP Prefix Count    : IPv4: 382607     IPv6: 247093
       Filters:
       Country        Action              v4 Term Count    IPv4        v6 Term Count   IPv6
 
       AU            DROP                    1             300            1            300    
 
 
 

show services web-filter secintel-policy status

To verify if an IP address is part of the GeoIP feed.

content_copy zoom_out_map
user@host> show services web-filter secintel-policy-db ip-prefix-information  192.168.1.1/24 profile Profile1
URL Filtering SecIntel Policy DB IP Prefix Info:
Profile     : Profile1
Downloaded Feed Category : GeoIP
Applied Feed Category    : GeoIP
Threat Level             : 255
Threat Level Action      : DROP 
Add Time                 : Sat Nov 27 18:06:29 2021
Filter Name              : v4-si-prof-Profile1-gbl-geo-filter
Filter Index             : 201326592
Filter Term Name         : FILTER_TL_255_COUNTRY_AU_ID_71
Pending Delete           : FALSE
 

Release Information

Statement introduced before Junos OS Release 18.4.

Support added in Junos OS Release 19.3R2 for Next Gen Services on MX Series routers MX240, MX480, and MX960 with the MX-SPC3 services card.

footer-navigation