Description

The Junos OS software release 12.x45-D16.1 includes a new protection-mode feature set. There are four modes to efficiently inspect traffic corresponding to the protection mode in which the SRX device is operated. The four modes are Perimeter, Perimeter-Full, Datacenter, and Datacenter-Full; all can be enabled via the sensor-configuration command.

Symptoms

How do I set the protection mode for the SRX and what modes of protection are available?

Solution


To set the protection mode for the SRX security configuration, use the following format:

# set security idp sensor-configuration security-configuration protection-mode <mode>


Mode options:

Mode Description
Perimeter-Full Default mode - This is the most secure configuration for perimeter protection.
Perimeter Perimeter configuration optimized for balanced protection and performance.
Datacenter-Full Standard for Datacenter; this is the most secure configuration for datacenter protection.
Datacenter Datacenter configuration optimized for balanced protection and performance.