[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Dropping Packets Using an Unknown Protocol

Protocol types with ID numbers of 137 or greater are reserved and undefined at this time. Therefore, there is no way to know in advance if a particular unknown protocol is benign or malicious.

Before You Begin
For background information, read Understanding Unknown Protocol Protection.

You can use either J-Web or the CLI configuration editor to drop packets that use an unknown protocol. The specified security zone is the one from which the packets originates.

This topic covers:

J-Web Configuration

To configure zones:

Select Configure>CLI Tools>Point and Click CLI.
Next to Security, click Configure or Edit.
Next to Zones, click Configure.
Next to Security zone, click Add new entry.
In the Name box, type zone.
In the Screen box, type unknown-protocol and click OK.
To save and commit the configuration, click Commit.

To configure screens:

Select Configure>CLI Tools>Point and Click CLI.
Next to Security, click Configure or Edit.
Next to Screen, click Configure.
Next to Ids option, click Add new entry.
In the Name box, type unknown-protocol.
Next to Ip, click Configure.
Next to unknown-protocol, select the check box and click OK.
To save and commit the configuration, click Commit.

CLI Configuration


            
               user@host# set security zones security-zone
                     zone screen unknown-protocol
               user@host# set security screen ids-option
                     unknown-protocol ip unknown-protocol

Dropping Packets Using an Unknown Protocol

J-Web Configuration

CLI Configuration

Related Topics