Security Intrusion Prevention Profile

Configure Security Intrusion Prevention Profile.

Diagram

Classes

sdwan

Name	Type	Constraint	Mandatory	Default Value
feature_profiles	Class	feature_profiles	No

feature_profiles (sdwan)

Name	Type	Constraint	Mandatory	Default Value
policy_object_profile	Class	policy_object_profile	No

policy_object_profile (sdwan.feature_profiles)

Name	Type	Constraint	Mandatory	Default Value
security_intrusion_prevention_profiles	List	security_intrusion_prevention_profiles	No

security_intrusion_prevention_profiles (sdwan.feature_profiles.policy_object_profile)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,32}$	Yes
alert_log_level	Choice	emergency, alert, critical, error, warning, notice, info, debug	No	error
custom_signature_set	Boolean	true, false	No	false
inspection_mode	Choice	detection, protection	Yes
signature_allow_list	String	Regex: ^[^&<>! "]{1,32}$	No
signature_set	Choice	balanced, connectivity, security, max-detect, no-rules-active	Yes

security_intrusion_prevention_profiles (sdwan.feature_profiles.policy_object_profile)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[^&<>! "]{1,32}$	Yes
alert_log_level	Choice	emergency, alert, critical, error, warning, notice, info, debug	No	error
custom_signature_set	Boolean	true, false	No	false
inspection_mode	Choice	detection, protection	Yes
signature_allow_list	String	Regex: ^[^&<>! "]{1,32}$	No
signature_set	Choice	balanced, connectivity, security	Yes

Examples

Example-1: This example demonstrates how to configure a Security Intrusion Prevention Profile with alert_log_level, custom_signature_set, inspection_mode, signature_allow_list, and signature_set.

sdwan:
  feature_profiles:
    policy_object_profile:
      security_intrusion_prevention_profiles:
        - name: intrusion_prevention_full
          alert_log_level: critical
          custom_signature_set: false
          inspection_mode: detection
          signature_allow_list: security_ips_signature
          signature_set: balanced

Example-2: This example demonstrates how to configure a Security Intrusion Prevention Profile with the max-detect signature set. The max-detect and no-rules-active signature sets require SD-WAN Manager version 20.18.1 or higher.

sdwan:
  feature_profiles:
    policy_object_profile:
      security_intrusion_prevention_profiles:
        - name: intrusion_prevention_max_detect
          inspection_mode: protection
          signature_set: max-detect

Examples

Example-1: This example demonstrates how to configure a Security Intrusion Prevention Profile with alert_log_level, custom_signature_set, inspection_mode, signature_allow_list, and signature_set.

sdwan:
  feature_profiles:
    policy_object_profile:
      security_intrusion_prevention_profiles:
        - name: intrusion_prevention_full
          alert_log_level: critical
          custom_signature_set: false
          inspection_mode: detection
          signature_allow_list: security_ips_signature
          signature_set: balanced