Juniper NETWORK AND SECURITY MANAGER 2010.4 - API GUIDE REV 1, Руководство пользователя

Страница: 48 / 170

Table 12: Backdoor Rulebase Data Elements (continued)
Severity of the attack. Within the IDP rulebase, you can override
the ordinary attack severity on a per-rule basis. Possible
settings:
• Default
•
Info
• Warning
•
Minor
• Major
•
Critical
severity
Log packets. seslog
Specifies the security devices or templates that will receive
and use this rule. You can select multiple security devices on
which to install the rule. target_collection
Exempt (rb_exempt_collection)
The exempt (rb_exempt_collection) rulebase works in conjunction with the IDP rulebase.
Before you create exempt rules, you must create rules in the IDP rulebase. If traffic
matches a rule in the IDP rulebase, IDP attempts to match the traffic against the rules
in the exempt rulebase before performing the specified action or creating a log record
for the event. When the IDP rulebase is deleted, the exempt rulebase is automatically
deleted. When you create an exempt rule, you must specify the source and destination
traffic to be exempted and the specific attacks that IDP will exempt.
The data elements in the exempt rulebase are illustrated and described in Figure 7 on
page 31 and Table 13 on page 31.
Copyright © 2010, Juniper Networks, Inc. 30
Network and Security Manager 2010.4 API Guide