Security

hi everyone,

First time poster on the community and looking forward to some clarification. 

my customer was using Jspace version 18.1 and a couple of months back we upgraded to 20.3. We can see the options of IPS and IPS policy under advanced security for the firewall standard policies.

I am trying to understand that if we need to turn IPS on and select the policy individually for each rule for IPS inspection to work.

if we only have IPS as ON And no policy selected under "IPS policy" what will be the behaviour?

thanks very much.

------------------------------
ARPAN PETER
------------------------------

Hi Arpan,

The 'IPS Policy' option was added in 18.2/18.3 and allows you to have multiple IDP Policies active on an SRX at any given time.

The 'IPS On/Off' option is deprecated at this point and relies on the singular active-policy configuration to control its behaviour. 

You cannot have both defined at one time. It's either/or. The two options are kept for legacy/backwards compatibility and will be removed eventually. 

Hope that helps,

------------------------------
Craig Dods
------------------------------

Original Message:
Sent: 07-05-2022 01:21
From: ARPAN PETER
Subject: IPS policy option under advanced security on security policies

hi everyone,

First time poster on the community and looking forward to some clarification. 

my customer was using Jspace version 18.1 and a couple of months back we upgraded to 20.3. We can see the options of IPS and IPS policy under advanced security for the firewall standard policies.

I am trying to understand that if we need to turn IPS on and select the policy individually for each rule for IPS inspection to work.

if we only have IPS as ON And no policy selected under "IPS policy" what will be the behaviour?

thanks very much.

------------------------------
ARPAN PETER
------------------------------