close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

security-intelligence-policy

date_range 26-Nov-24

arrow_backward

arrow_forward

Syntax

security-intelligence-policy {
    geo-ip
    threat-level threat-level {
        policy-map policy-name
            };
    threat-action {
        drop;
        drop-and-log;
        drop-and-sample;
        drop-log-and-sample;
        log;
        log-and-sample;
        sample;
    }
    white-list;
    black-list;
}

Hierarchy Level

content_copy zoom_out_map
[edit services web-filter profile profile-name]
[edit services web-filter profile profile-name url-filter-template template-name]

Description

Define the threat level and action for the Web filter profile. The packets are redirected at the Packet Forwarding Engine based on the configured threat-level action associated with the threat-level of the destination IP address.

Options

threat-level

Define the Web filtering threat level. The value ranges from 1 through 10

policy-map

Map the threat level to a user-attribute defined by the url-filterd.

threat-action

Define the way the Packet Forwarding Engine processes packets in response to a threat. Only one action can be configured for each threat level that is defined. The default threat-action is accept.

drop—Drop the packets and do not generate a log message.
drop-and-log—Drop the packets and generate a log message.
drop-and-sample—Drop and sample the packets.
drop-log-and-sample—Drop and sample the packets, and generate a log message.
log—Allow the packets and generate a log message.
log-and-sample—Allow, sample the packets, and generate a log message.
sample—Sample the packets.

white-list	Allow the IP addresses configured either as a file or as an IP address-list .
black-list	Block the IP addresses configured either as a file or as an IP address-list .

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 19.3R1 on MX Series routers with Juniper Advanced Threat Prevention Cloud (Juniper ATP Cloud) .

Support added in Junos OS Release 19.3R2 for Next Gen Services on MX Series routers MX240, MX480, and MX960 with the MX-SPC3 services card

arrow_backward PREVIOUS security-intelligence (IDP)

NEXT arrow_forward security-intelligence(services)

Junos CLI Reference

ON THIS PAGE

security-intelligence-policy

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

security-intelligence-policy

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch