Using A Dpi Application Profile In An Object Policy Rule; Using A Dpi Application Profile In An Ipv4 Object Policy Rule; Using A Dpi Application Profile In An Ipv6 Object Policy Rule; Applying Object Policies To Zone Pairs - HP MSR Series Configuration Manual

Step
2. Import user-defined
IPS signatures.
Using a DPI application profile in an object policy
rule
Perform this task to use a DPI application profile in an IPv4 or IPv6 object policy rule. For information
about object policy rules, see Security Configuration Guide.

Using a DPI application profile in an IPv4 object policy rule

Step
1. Enter system view.
2. Create an IPv4 object
policy and enter its view.
3. Use a DPI application
profile in the rule.

Using a DPI application profile in an IPv6 object policy rule

Step
1. Enter system view.
2. Create an IPv6 object policy
and enter its view.
3. Use a DPI application profile
in the rule.

Applying object policies to zone pairs

For more information about this feature, see Security Configuration Guide.
To apply an object policy to a zone pair:
Command
ips signature import snort file-path
Command
system-view
object-policy ip object-policy-name
rule [ rule-id ] { drop | pass | inspect
app-profile-name } [ [ source-ip
object-group-name | any ] [ destination-ip
object-group-name | any ] [ service
object-group-name | any ] [ vrf vrf-name ]
[ counting ] [ disable ] [ logging ]
[ time-range time-range-name ] ] *
Command
system-view
object-policy ipv6
object-policy-name
rule [ rule-id ] { drop | pass|
inspect app-profile-name }
[ [ source-ip object-group-name |
any ] [ destination-ip
object-group-name | any ]
[ service object-group-name |
any ] [vrf vrf-name ] [ counting ]
[ disable ] [ logging ]
[ time-range time-range-name ] ]
*
581
Remarks
By default, no user-defined IPS
signatures exist.
Remarks
N/A
N/A
By default, no DPI
application profile is used
in an IPv4 object policy
rule.
Remarks
N/A
N/A
By default, no DPI application
profile is assigned to an IPv6
object policy rule.