severity

See the following sections:

• severity (Custom Attack)
• severity (Dynamic Attack Group)
• severity (IPS Rulebase)

severity (Custom Attack)

Syntax

Hierarchy Level

Release Information

Statement introduced in Release 9.3 of JUNOS software.

Description

Select the severity that matches the lethality of the attack object on your network.

This statement is supported on SRX-series devices.

Options

You can set the severity level to the following levels:

• critical—Contains attack objects matching exploits that attempt to evade detection, cause a network device to crash, or gain system-level privileges.
• info—Contains attack objects matching normal, harmless traffic containing URLs, DNS lookup failures, SNMP public community strings, and Peer-to-Peer (P2P) parameters. You can use informational attack objects to obtain information about your network.
• major—Contains attack objects matching exploits that attempt to disrupt a service, gain user-level access to a network device, or activate a Trojan horse previously loaded on a device.
• minor—Contains attack objects matching exploits that detect reconnaissance efforts attempting to access vital information through directory traversal or information leaks.
• warning—Contains attack objects matching exploits that attempt to obtain noncritical information or scan a network with a scanning tool.

Usage Guidelines

For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

severity (Dynamic Attack Group)

Syntax

Hierarchy Level

Release Information

Statement introduced in Release 9.3 of JUNOS software.

Description

Specify a severity filter to add attack objects based on the attack severity.

This statement is supported on SRX-series devices.

Options

values—Name of the severity filter. You can select from the following severity:

• critical—The attack is a critical one.
• info—Provide information of attack when it matches.
• major—The attack is a major one.
• minor—The attack is a minor one.
• warning—Issue a warning when attack matches.

Usage Guidelines

For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

severity (IPS Rulebase)

Syntax

Hierarchy Level

Release Information

Statement introduced in Release 9.2 of JUNOS software.

Description

Set the rule severity levels in logging to support better organization and presentation of log records on the log server. You can use the default severity settings of the selected attack object, or choose a specific severity for your rule. The severity you configure in the rules overrides the inherited attack severity.

This statement is supported on SRX-series devices.

Options

You can set the severity level to the following levels:

• critical—2
• info—3
• major—4
• minor—5
• warning—7

Usage Guidelines

For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.