close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

feature-profile

date_range 20-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
feature-profile {
    anti-spam {
        address-blacklist list-name;
        address-whitelist list-name;
        sbl {
            profile profile-name {
                custom-tag-string [string];
                (sbl-default-server | no-sbl-default-server);
                spam-action (block | tag-header | tag-subject);
            }
        }
        traceoptions flag flag;
    }
    anti-virus {
        juniper-express-engine {
            pattern-update {
                email-notify {
                    admin-email email-address;
                    custom-message message;
                    custom-message-subject message-subject;
                }
                interval value;
                no-autoupdate;
                proxy {
                    password password-string;
                    port port-number;
                    server address-or-url;
                    username name;
                }
                url url;
            }
            profile profile-name {
                 fallback-options {
                    content-size (block | log-and-permit);
                    default (block | log-and-permit);
                    engine-not-ready (block | log-and-permit);
                    out-of-resources (block | (log-and-permit);
                    timeout (block | log-and-permit);
                    too-many-requests (block | log-and-permit);
                }
                notification-options {
                    fallback-block {
                        administrator-email email-address;
                        allow-email;
                        custom-message message;
                        custom-message-subject message-subject;
                        display-host;
                        (notify-mail-sender | no-notify-mail-sender);
                         type (message | protocol-only);
                    }
                    fallback-non-block {
                        custom-message message;
                        custom-message-subject message-subject;
                        (notify-mail-recipient | no-notify-mail-recipient);
                    }
                    virus-detection {
                        custom-message message;
                        custom-message-subject message-subject;
                        (notify-mail-sender | no-notify-mail-sender);
                         type (message | protocol-only);
                    }
                }
                scan-options {
                    content-size-limit value;
                    (intelligent-prescreening | no-intelligent-prescreening);
                    timeout value;
                }
                trickling {
                    timeout value;
                }
            }
        }
        kaspersky-lab-engine {
            pattern-update {
                email-notify {
                    admin-email email-address;
                    custom-message message;
                    custom-message-subject message-subject;
                }
                interval value;
                no-autoupdate;
                proxy {
                    password password-string;
                    port port-number;
                    server address-or-url;
                    username name;
                }
                url url;
            }
            profile profile-name {
                 fallback-options {
                    content-size (block | log-and-permit);
                    corrupt-file (block | log-and-permit);
                    decompress-layer (block | log-and-permit);
                    default (block | log-and-permit);
                    engine-not-ready (block | log-and-permit);
                    out-of-resources (block | (log-and-permit);
                    password-file (block | (log-and-permit);
                    timeout (block | log-and-permit);
                    too-many-requests (block | log-and-permit);
                }
                notification-options {
                    fallback-block {
                        administrator-email email-address;
                        allow-email;
                        custom-message message;
                        custom-message-subject message-subject;
                        display-host;
                        (notify-mail-sender | no-notify-mail-sender);
                         type (message | protocol-only);
                    }
                    fallback-non-block {
                        custom-message message;
                        custom-message-subject message-subject;
                        (notify-mail-recipient | no-notify-mail-recipient);
                    }
                    virus-detection {
                        custom-message message;
                        custom-message-subject message-subject;
                        (notify-mail-sender | no-notify-mail-sender);
                         type (message | protocol-only);
                    }
                }
                scan-options {
                    content-size-limit value;
                    decompress-layer-limit value;
                    (intelligent-prescreening | no-intelligent-prescreening);
                    scan-extension filename;
                    scan-mode  (all | by-extension);
                    timeout value;
                }
                trickling {
                    timeout value;
                }
            }
        }
        mime-whitelist {
            exception listname;
            list listname {
                exception listname;
            }
        }
        sophos-engine {
            pattern-update {
                email-notify {
                    admin-email email-address;
                    custom-message message;
                    custom-message-subject message-subject;
                }
                interval value;
                no-autoupdate;
                proxy {
                    password password-string;
                    port port-number;
                    server address-or-url;
                    username name;
                }
                url url;
            }
            profile <name> {
                fallback-options {
                    content-size (block | log-and-permit | permit);
                    default (block | log-and-permit | permit);
                    engine-not-ready (block | log-and-permit | permit);
                    out-of-resources (block | log-and-permit | permit);
                    timeout (block | log-and-permit | permit);
                    too-many-requests (block | log-and-permit | permit);
                }
                notification-options {
                    fallback-block {
                        administrator-email email-address;
                        allow-email;
                        custom-message message;
                        custom-message-subject message-subject;
                        display-host;
                        (notify-mail-sender | no-notify-mail-sender);
                         type (message | protocol-only);
                    }
                    fallback-non-block {
                        custom-message message;
                        custom-message-subject message-subject;
                        (notify-mail-recipient | no-notify-mail-recipient);
                    }
                    virus-detection {
                        custom-message message;
                        custom-message-subject message-subject;
                        (notify-mail-sender | no-notify-mail-sender);
                         type (message | protocol-only);
                    }
                }
                scan-options {
                    content-size-limit value;
                    (no-uri-check | uri-check);
                    timeout value;
                }
                trickling {
                    timeout value;
                }
            }
            sxl-retry value;
            sxl-timeout seconds;
        }
        traceoptions flag flag; 
         type (juniper-express-engine | kaspersky-lab-engine | sophos-engine);
        url-whitelist listname;
    }
    content-filtering {
        profile profile-name { 
            block-command protocol-command-list;
            block-content-type (activex | exe | http-cookie | java-applet | zip);
            block-extension extension-list;
            block-mime {
                exception list-name;
                list list-name;
            }
            notification-options {
                custom-message message;
                (notify-mail-sender | no-notify-mail-sender);
                 type (message | protocol-only);
            }
            permit-command protocol-command-list;
        }
        traceoptions flag flag; 
    }
    web-filtering {
        url-whitelist custwhitelist;
        url-blacklist custblacklist;
        http-reassemble;
        type juniper-enhanced;
        juniper-enhanced {
            cache {
                timeout 1800;
                size 500;
            }
            server {
                host rp.cloud.threatseeker.com;
                port 80;
            }
            profile junos-wf-enhanced-default {
                category {
                    Enhanced_Hacking {
                        action log-and-permit;
                        }
                        Enhanced_Government {
                        action quarantine;
                    }
                }
                site-reputation-action {
                    very-safe permit;
                    moderately-safe log-and-permit;
                    fairly-safe log-and-permit;
                    harmful block;
                    suspicious block;
                }
                default block;
                custom-block-message "***access denied ***";
                fallback-settings {
                    default block;
                    server-connectivity block;
                    timeout block;
                    too-many-requests block;
                }
                timeout 10;
                no-safe-search;
            }
            utm-policy mypolicy {
                web-filtering {
            http-profile my_ewfprofile01;
        }
        }
    }
    web-filtering {
        juniper-enhanced {
            cache {
                size value;
                timeout value;
            }
            profile profile-name {
                category customurl-list name {
                    action  (block | log-and-permit | permit | quarantine);
                }
                custom-block-message value;
                custom-quarantine-message value;
                default  (block | log-and-permit | permit | quarantine);
                fallback-settings {
                    default  (block | log-and-permit);
                    server-connectivity   (block | log-and-permit);
                    timeout    (block | log-and-permit);
                    too-many-requests  (block | log-and-permit);
                }
                no-safe-search;
                site-reputation-action {
                    fairly-safe   (block | log-and-permit | permit | quarantine);
                    harmful   (block | log-and-permit | permit | quarantine);
                    moderately-safe  (block | log-and-permit | permit | quarantine);
                    suspicious  (block | log-and-permit | permit | quarantine);
                    very-safe   (block | log-and-permit | permit | quarantine);
                }
                timeout value;
            }
            server {
                host host-name;
                port number;
            }
        }
        juniper-local {
            profile profile-name {
                custom-block-message value;
                default  (block | log-and-permit | permit);
                fallback-settings {
                    default (block | log-and-permit);
                    server-connectivity (block | log-and-permit);
                    timeout  (block | log-and-permit);
                    too-many-requests  (block | log-and-permit);
                }
                timeout value;
                no-safe-search;
            }
        }
        surf-control-integrated {
            cache {
                size value;
                timeout value;
            }
            profile profile-name {
                category customurl-list name {
                    action  (block | log-and-permit | permit);
                }
                custom-block-message value;
                default (block | log-and-permit | permit);
                fallback-settings {
                    default  (block | log-and-permit);
                    server-connectivity   (block | log-and-permit);
                    timeout    (block | log-and-permit);
                    too-many-requests  (block | log-and-permit);
                }
                timeout value;
            }
            server {
                host host-name;
                port number;
            }
        }
        traceoptions flag flag; 
        type (juniper-enhanced | juniper-local | surf-control-integrated | websense-redirect);
        url-blacklist listname;
        url-whitelist listname;
        websense-redirect {
             profile profile-name {
                account value;
                custom-block-message value;
                fallback-settings {
                    default  (block | log-and-permit);
                    server-connectivity  (block | log-and-permit);
                    timeout   (block | log-and-permit);
                    too-many-requests  (block | log-and-permit);
                }
                server {
                    host host-name;
                    port number;
                }
                sockets value;
                timeout value;
                no-safe-search;
            }
        }
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit security utm default-configuration]
[edit security utm]

Description

Configure Content Security features, antivirus, antispam, content-filtering, and web-filtering by creating feature profiles.

Options

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Starting in Junos OS Release 21.4R1, content evaluation is based of the file content. The file type-based evaluation of content is deprecated and the related configurations are hidden. So, the content filtering options in this hierarchy is deprecated and not supported from Junos OS Release 21.4R1.

You can use the legacy functionality if you do not want to migrate to enhanced content filtering functionality. You will be allowed to use the legacy configurations, but all the legacy configuration knobs are deprecated and hidden. Also, you will receive system logs and error message warnings when you use the legacy configuration options.

The Kaspersky, Express antivirus and Surf-Control features are not supported from Junos OS Release 15.1X49-D10 onwards. For previous releases, statement introduced in Release 9.5.

Starting with Junos OS Release 18.2R1, the following commands under the [edit security utm feature-profile] hierarchy level are deprecated:

set web-filtering type
set web-filtering url-blacklist
set web-filtering url-whitelist
set web-filtering http-persist
set web-filtering http-reassemble
set web-filtering traceoptions
set web-filtering juniper-enhanced cache
set web-filtering juniper-enhanced reputation
set web-filtering juniper-enhanced query-type
set anti-virus mime-whitelist
set anti-virus url-whitelist
set anti-virus type
set anti-virus traceoptions
set anti-virus sophos-engine
set anti-spam address-blacklist
set anti-spam address-whitelist
set anti-spam traceoptions
set content-filtering traceoptions

no-safe-search option added for Websense redirect and Juniper local in Junos OS Release 20.2R1.

arrow_backward PREVIOUS fcoe-trusted

NEXT arrow_forward features (VNF)

Junos CLI Reference

ON THIS PAGE

feature-profile

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

feature-profile

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch