chain

date_range 29-Apr-24

arrow_backward

arrow_forward

Syntax

chain {
    expression boolean-expression;
    member (Security IDP) member-name {
        attack-type (Security Anomaly) {
            (anomaly ...same statements as in [edit security idp custom-attack attack-name attack-type anomaly] hierarchy level | signature ...same statements as in [edit security idp custom-attack attack-name attack-type signature] hierarchy level);
        }
    }
    order;
    protocol-binding {
        application (Security Custom Attack) application-name;
        icmp;
        icmpv6;
        ip (Security IDP Custom Attack) {
            protocol-number transport-layer-protocol-number;
        }
        ipv6 {
            protocol-number transport-layer-protocol-number;
        }
        rpc {
            program-number rpc-program-number;
        }
        tcp (Security IDP Protocol Binding) {
            minimum-port port-number <maximum-port port-number>;
        }
        udp (Security IDP Protocol Binding) {
            minimum-port port-number <maximum-port port-number>;
        }
    }
    reset;
    scope (session | transaction);
}

Hierarchy Level

content_copy zoom_out_map
[edit security idp custom-attack attack-name attack-type]

Description

Chain attack object combines multiple signatures and/or protocol anomalies into a single object. Traffic must match all of the combined signatures and/or protocol anomalies to match the chain attack object.

Options

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 9.3.

arrow_backward PREVIOUS cgn-pic

NEXT arrow_forward chain-order (Application Identification)

Junos CLI Reference

ON THIS PAGE