Description

This article documents the function of the  "set security idp sensor-configuration flow drop-if-no-policy-loaded" command.

Symptoms

In the 12.1X44-D20+ Junos code, there is a new command, "set security idp sensor-configuration flow drop-if-no-policy-loaded".  What does this command do?

Solution


SRX is an integrated device where IDP is an optional feature. The "drop-if-no-policy-loaded" knob ensures that the SRX IDP will not pass any traffic if no IDP policy is loaded.