Syn Protector (Rb_Syndef_Collection) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - API GUIDE REV 1 Manual

Table 16: Multicast Rulebase Data Elements (continued)
Data Element
from_zone_exceptions
src-group
to_zone
to_zone_exceptions_collection
dst-group
message_type
bi-directional
customOptions_collection
comments
rb-link
target_collection

SYN Protector (rb_syndef_collection)

Copyright © 2010, Juniper Networks, Inc.
Description
From_zone exceptions.
Multicast group(s) to which the multicast traffic is sent.
Multicast policy rules define the flow of multicast traffic between the source and
multicast groups. You can use this parameter to specify one particular multicast group,
any multicast group, or an access list that identifies the allowed multicast groups.
Destination zone. The source will send multicast traffic to this zone.
To_zone exceptions.
Destination group. Optionally, you can map the source multicast group address to
another multicast group address. When the source sends the multicast traffic to a
multicast group address, the security device translates the original multicast group
address to another address that you specified.
The rule applies to this type of multicast control traffic.
Bi-directional policy.
Custom options.
Comment about the multicast collection.
Rule group name.
Specifies the security devices or templates that will receive and use this rule. You can
select multiple security devices on which to install the rule.
The SYN Protector (rb_syndef_collection) rulebase protects your network from
SYN-floods by ensuring that a three-way handshake is performed successfully for
specified TCP traffic. If you know that your network is vulnerable to a SYN-flood, use the
SYN-Protector rulebase to prevent it.
These data elements are illustrated and described in Figure 12 on page 46 and Table 17
on page 46.
Chapter 5: Security Data Model
45