Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual page 532

Network and Security Manager Administration Guide
482
MX series devices and IDP policies can be associated with service sets using the
configuration node Services > Service Interface Pool > Service Set.
To create a new IDP policy:
1. In the main navigation tree, select Policies, then double-click the policy name in the
Security Policies window. The Security Policy window appears.
2. Select the IDP tab in the Security Policy window.
3. Click Add in the Policies panel.
4. Enter a name for the policy and comments if desired, in the pop-up menu, and click
OK. The new IDP policy is added to the Policies panel.
To add rules to the IDP policy:
1. In the main navigation tree, select Security Policies, then double-click the policy
name in the Security Policies window. The Security Policy window appears.
2. Select the IDP tab in the Security Policy window.
4. Right-click on the policy name in the Policies panel and select Add Rule. The rule
will be added to the IDP policy.
NOTE: If you select an IDP rule associated with multiple IDP policies from
the IDP rule table in a Security Policy window, the Policies panel displays the
multiple IDP policies to which the rule is associated.
To remove rules from the IDP policy:
1. In the main navigation tree, select Security Policies, then double-click the policy
name in the Security Policies window. The Security Policy window appears.
2. Select theIDP tab in the Security Policy window.
3. Select a rule from the IDP rule table.
4. Right-click on the policy that includes the rule in the Policies panel, and select
Remove Rule. The rule will be removed from the corresponding IDP policy in the Policies
panel but will remain in the IDP rule table.
NOTE: For other devices which do not support multiple IDP policies, an IDP
rule's association with multiple IDP policies on the Policies panel is ignored.
NOTE: From-Zone and To-Zones are not applicable to MX series devices and
these values will be trimmed or ignored if configured.
Copyright © 2010, Juniper Networks, Inc.