License申請(qǐng)：
admin@SRX3600> request system license update trial

站在用戶的角度思考問題，與客戶深入溝通，找到福海網(wǎng)站設(shè)計(jì)與福海網(wǎng)站推廣的解決方案，憑借多年的經(jīng)驗(yàn)，讓設(shè)計(jì)與互聯(lián)網(wǎng)技術(shù)結(jié)合，創(chuàng)造個(gè)性化、用戶體驗(yàn)好的作品，建站類型包括：做網(wǎng)站、網(wǎng)站建設(shè)、企業(yè)官網(wǎng)、英文網(wǎng)站、手機(jī)端網(wǎng)站、網(wǎng)站推廣、申請(qǐng)域名、雅安服務(wù)器托管、企業(yè)郵箱。業(yè)務(wù)覆蓋福海地區(qū)。

更新特征庫要求配置中已有DNS配置，正確的時(shí)間配置，下載的URL
security {
idp {
security-package {
url https://services.netscreen.com/cgi-bin/index.cgi;
}
}

需要先更新特征庫，再完成全局配置
1、 下載特征庫
admin@SRX3600> request security idp security-package download
2、更新
admin@SRX3600> request security idp security-package install

IPS配置方法：

IDP對(duì)應(yīng)的規(guī)則：（全局 ）
set security idp idp-policy IDP_Default rulebase-ips rule 1 match from-zone any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match source-address any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match to-zone any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match destination-address any
set security idp idp-policy IDP_Default rulebase-ips rule 1 match application default
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Critical - IP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Critical - TCP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Major - TCP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 match attacks predefined-attack-groups "Major - IP"
set security idp idp-policy IDP_Default rulebase-ips rule 1 then action no-action
set security idp idp-policy IDP_Default rulebase-ips rule 1 then notification log-attacks alert
set security idp active-policy IDP_Default

在具體的策略中調(diào)用，例如：
set security policies from-zone trust to-zone untrust policy t-u-1 match source-address any
set security policies from-zone trust to-zone untrust policy t-u-1 match destination-address any
set security policies from-zone trust to-zone untrust policy t-u-1 then permit application-services idp

日志查看：
如果直接在設(shè)備中查看IDP log，需要做兩步操作：
1、
security {
log {
mode event;
event-rate 1500;
}
}
日志從data-plane轉(zhuǎn)發(fā)到control-plane

2、增加IDP_log文件記錄IDP信息
set system syslog file IDP_log any any
set system syslog file IDP_log match RT_IDP
set system syslog file IDP_log archive size 10m
set system syslog file IDP_log archive files 10