Security

greetings all,

my firewall SRX1500 currently has the "Recommended" IDP policy activated through the command set security idp active-policy Recommended.

Now my question is, since this default IDP policy is activated globally, do i need also to link it to each and every security policy as well?

Thank you.

It depends on your code version and I believe actual config.  I think this changed around the 18.x timeframe where you add IDP per policy vs having a monolithic IDP policy.  Can you post your version and IDP Config bits?

Thanks!

dsd

for outbound client traffic yes.  If you're hosting services, you want to use another one of Juniper's IDP templates.