Juniper Junos OS - Configuring Intrusion Detection and Prevention for SRX Series

}
Antivirus
kaspersky-lab-engine {
pattern-update {
url http://update.juniper-updates.net/AV/SRX210/;
interval 60;
}
profile junos-av-defaults {
fallback-options {
default log-and-permit;
corrupt-file log-and-permit;
password-file log-and-permit;
decompress-layer log-and-permit;
content-size log-and-permit;
engine-not-ready log-and-permit;
timeout log-and-permit;
out-of-resources log-and-permit;
too-many-requests log-and-permit;
}
scan-options {
intelligent-prescreening;
scan-mode all;
content-size-limit 10000;
timeout 180;
decompress-layer-limit 2;
}
notification-options {
virus-detection {
type message;
no-notify-mail-sender;
custom-message "VIRUS WARNING";
}
fallback-block {
type message;
no-notify-mail-sender;
}
}
}
}
juniper-express-engine {
pattern-update {
url http://update.juniper-updates.net/EAV/SRX210/;
interval 1440;
}
profile junos-eav-defaults {
fallback-options {
default log-and-permit;
content-size log-and-permit;
engine-not-ready log-and-permit;
timeout log-and-permit;
out-of-resources log-and-permit;
too-many-requests log-and-permit;
}
scan-options {
55Copyright © 2016, Juniper Networks, Inc.
Chapter 8: Configuring UTM for Branch SRX Series