IPS Profiles Overview
The intrusion prevention system (IPS) profile is deployed on a device by associating the profile with a firewall policy rule, which is deployed on the device. You can associate IPS rules and exempt rules with an IPS profile.
Use the IPS Profiles page to manage IPS profiles. To access this page, select SRX > Security Subscriptions > IPS > IPS Profiles.
Field Descriptions - IPS Profiles Page
Field |
Description |
---|---|
Policy Name |
The name of the IPS profile. Click the IPS-Profile-Name to manage the IPS rules associated with the IPS profile. The IPS-Profile-Name page opens. |
Rules |
Indicates the count of rules created in the IPS profile. Click the rule count to manage the IPS rules associated with the IPS profile. The IPS-Profile-Name page opens. |
Predefined / Custom |
Indicates whether the IPS profile was system-generated (Predefined) or created by a user (Custom). |
Description |
The description of the IPS profile. |
Field Descriptions - <IPS-Profile-Name> Page
When you click a profile name, the IPS profile page is displayed. You can view, add, modify, clone, or delete the IPS rules and exempt rules in the IPS profiles.
Field |
Description |
---|---|
Name |
The name of the IPS rule or exempt rule. |
IPS Signatures |
Displays the IPS signatures associated with the IPS rule or exempt rule. If multiple signatures are associated with the rule, the number of additional signatures is displayed. Hover over the number to view the full list of signatures. |
Action |
Displays the action to be taken when the IPS rule is matched. |
Options |
Displays the following options for IPS rules:
|