Configuring Intrusion Detection Service (Nsm Procedure); Add Or Modify The Settings As Specified In Table; Click One; Ok-To Save The Changes - Juniper NETWORK AND SECURITY MANAGER 2010.3 - M-SERIES AND MX-SERIES DEVICES GUIDE REV1 Manual

Related Topics

Configuring Intrusion Detection Service (NSM Procedure)

Copyright © 2010, Juniper Networks, Inc.
Table 234: CoS Configuration Details (continued)
Task
Specify the rule set the router
uses when applying this
service.
Configuring Service Interface Pools (NSM Procedure) on page 455
Configuring a Service Set (NSM Procedure) on page 456
The Adaptive Services (AS) or Multiservices PIC supports a limited set of intrusion
detection services (IDS) to perform attack detection. IDS enables you to focus attack
detection and remedial actions on specific hosts or networks that you specify in the IDS
terms. Signature detection is not supported.
To configure IDS in NSM:
In the navigation tree select Device Manager > Devices.
1.
Click the Device tree tab and then double-click the device to select it.
2.
In the Configuration tab, expand Services > Ids.
3.
Add or modify the settings as specified in Table 235 on page 416.
4.

Click one:

5.
OK—To save the changes.
Cancel—To cancel the modifications.
Your Action
1. Click Rule-Set next to Cos.
2. Click Add new entry next to Rule-Set.
3. In the Name box, enter the identifier for the collection of rules
that constitute this rule set.
4. In the Comment box, enter the comment.
5. Expand Rule-Set.
6. Click Rule next to rule-set.
7. Click Add new entry next to Rule.
8. From the Name list, select the identifier for the collection of
terms that constitute this rule.
9. In the Comment box, enter the comment.
Chapter 23: Configuring Services
415