Configuring Session Capacity for IDP (CLI Procedure)

The configuration instructions in this topic describe how modify session capacity for IDP policies.

You do this by adding the maximize-idp-sessions command and then adding the weight option to specify IDP sessions.

Note: The weight option depends on the maximize-idp-sessions command being set.

1. If you have an active IDP policy, you can configure the device to increase IDP session capacity by entering following command:
   user@host# set security forwarding-process application-services maximize-idp-sessions
2. You can further adjust the weight of the firewall and IDP processing functions, such as in the case of heavier IDP policies with the following command:.
   user@host# set security forwarding-process application-services maximize-idp-sessions weight idp
3. Commit your changes. You must reboot the device for any session capacity setting changes to take effect.

   Note: If the device has maximize-idp-sessions weight enabled for IDP, and you do not have an IDP policy configured, a warning message appears when you commit your configuration. If you see this warning, you should remove your configured settings.

To turn maximize-idp-sessions settings off, remove the maximize-idp-sessions configuration.

Note: You must reboot the device for any maximize-idp-sessions setting changes to take effect.

Related Topics

• JUNOS Software Feature Support Reference for SRX Series and J Series Devices
• IDP Policies Overview
• Performance and Capacity Tuning for IDP Overview