Description

There is a predefined profile for web-filtering settings, but how do I determine what those settings are? This article provides an answer.

 

Symptoms

  • Predefined web-filtering profile is available to use in configuration.

  • I am unable to determine what the settings are for the default web-filtering profiles.

 

Solution

To determine the settings for the predefined profiles for web filtering, apply the following command:

root@srx> show configuration groups junos-defaults security utm feature-profile web-filtering

It shows the default settings for web filtering:

root@srx> ...curity utm feature-profile web-filtering          
##
## protect: groups junos-defaults
##
websense-redirect {
    profile junos-wf-websense-default {
        custom-block-message "Juniper Web Filtering has been set to block this site.";
        fallback-settings {
            default log-and-permit;
            server-connectivity log-and-permit;
            timeout log-and-permit;
            too-many-requests log-and-permit;
        }
    }
}
juniper-local {
    profile junos-wf-local-default {
        custom-block-message "Juniper Web Filtering has been set to block this site.";
        fallback-settings {
            default log-and-permit;
            server-connectivity log-and-permit;
            timeout log-and-permit;
            too-many-requests log-and-permit;
        }
    }
}
juniper-enhanced {
    server {
        host rp.cloud.threatseeker.com;
        port 80;
    }
    profile junos-wf-enhanced-default {
        category {
            Enhanced_Adult_Material {
                action block;
            }
            Enhanced_Gambling {
                action block;
            }
            Enhanced_Games {
                action block;
            }
            Enhanced_Illegal_or_Questionable {
                action block;
            }
            Enhanced_Tasteless {        
                action block;
            }
            Enhanced_Violence {
                action block;
            }
            Enhanced_Weapons {
                action block;
            }
            Enhanced_Militancy_and_Extremist {
                action block;
            }
            Enhanced_Racism_and_Hate {
                action block;
            }
            Enhanced_Advertisements {
                action block;
            }
            Enhanced_Nudity {
                action block;
            }
            Enhanced_Adult_Content {
                action block;
            }                           
            Enhanced_Sex {
                action block;
            }
            Enhanced_Hacking {
                action block;
            }
            Enhanced_Personals_and_Dating {
                action block;
            }
            Enhanced_Alcohol_and_Tobacco {
                action block;
            }
            Enhanced_Abused_Drugs {
                action block;
            }
            Enhanced_Marijuana {
                action block;
            }
            Enhanced_Malicious_Web_Sites {
                action block;
            }
            Enhanced_Spyware {
                action block;           
            }
            Enhanced_Phishing_and_Other_Frauds {
                action block;
            }
            Enhanced_Keyloggers {
                action block;
            }
            Enhanced_Emerging_Exploits {
                action block;
            }
            Enhanced_Potentially_Damaging_Content {
                action block;
            }
            Enhanced_Malicious_Embedded_Link {
                action block;
            }
            Enhanced_Malicious_Embedded_iFrame {
                action block;
            }
            Enhanced_Suspicious_Embedded_Link {
                action block;
            }
            Enhanced_Potentially_Unwanted_Software {
                action block;
            }
            Enhanced_Potentially_Exploited_Documents {
                action block;
            }
            Enhanced_Mobile_Malware {
                action block;
            }
            Enhanced_Unauthorized_Mobile_Marketplaces {
                action block;
            }
            Enhanced_Custom_Encrypted_Payloads {
                action block;
            }
            Enhanced_Files_Containing_Passwords {
                action block;
            }
            Enhanced_Advanced_Malware_Command_and_Control {
                action block;
            }
            Enhanced_Advanced_Malware_Payloads {
                action block;
            }                           
        }
        default log-and-permit;
        custom-block-message "Juniper Web Filtering has been set to block this site.";
        fallback-settings {
            default log-and-permit;
            server-connectivity log-and-permit;
            timeout log-and-permit;
            too-many-requests log-and-permit;
        }
    }
}

 

Modification History

2020-10-19: Article reviewed for accuracy; minor output changes made to reflect new versions