install {
ignore-version-check;
}
source-address address;
url url-name;
}
sensor-configuration {
application-identification {
max-packet-memory-ratio percemtage-value;
max-reass-packet-memory-ratio percemtage-value;
max-tcp-session-packet-memory value;
max-udp-session-packet-memory value;
}
detector {
protocol-name protocol-name {
tunable-name tunable-name {
tunable-value protocol-value;
}
}
}
flow {
(allow-icmp-without-flow | no-allow-icmp-without-flow);
drop-if-no-policy-loaded;
drop-on-failover;
drop-on-limit;
fifo-max-size value;
hash-table-size value;
(log-errors | no-log-errors);
max-sessions-offset value;
max-timers-poll-ticks value;
min-objcache-limit-lt lower-threshold-value;
min-objcache-limit-ut upper-threshold-value;
reject-timeout value;
(reset-on-policy | no-reset-on-policy);
udp-anticipated-timeout value;
}
global {
(enable-all-qmodules | no-enable-all-qmodules);
(enable-packet-pool | no-enable-packet-pool);
gtp (decapsulation | no-decapsulation);
memory-limit-percent value;
(policy-lookup-cache | no-policy-lookup-cache);
}
high-availability {
no-policy-cold-synchronization;
}
disable-low-memory-handling;
ips {
content-decompression-max-memory-kb value;
content-decompression-max-ratio value;
(detect-shellcode | no-detect-shellcode);
fifo-max-size value;
(ignore-regular-expression | no-ignore-regular-expression);
log-supercede-min minimum-value;
pre-filter-shellcode;
(process-ignore-s2c | no-process-ignore-s2c);
85Copyright © 2016, Juniper Networks, Inc.
Chapter 11: Configuration Statements