Description

In the UTM anti-virus feature, a mime-whitelist can be configured to skip some mime types for performance-preferred implementation. There is a predefined mime-pattern in the junos-defaults group, but this predefined mime-pattern is not listed as mime-white by default. This article describes how to add it.

Symptoms

Predefined mime-pattern junos-default-bypass-mime is not listed in mime-whitelist by default.

Solution

 

A predefined mime-pattern is in junos-defaults group, as seen below:

root@SRX550A> show configuration groups junos-defaults security utm custom-objects mime-pattern
junos-default-bypass-mime {
value [ text/html text/css audio/ video/ image/ application/pdf application/x-director ];
}

To add this mime-pattern into a configuration, the following is required;

root@SRX550A# set security utm feature-profile anti-virus mime-whitelist list junos-default-bypass-mime
root@SRX550A# commit


NOTE:
There is a change to the default configuration, per PR1008329.
  • Change junos-default-bypass-mime to text/css audio/ video/ image/

  • Add it to mime-whitelist