1/31/2023 0 Comments How to block skypeYou must see something similar like below run show log idp_logĭec 28 15:09:30 ankara RT_IDP: IDP_ATTACK_LOG_EVENT: IDP: at 1325084969, SIG Attack log 212.187.172.78/443> for TCP protocol and service SERVICE_IDP application NONE by rule 1 of rulebase IPS in policy My_Policy. IDP policy and detector loaded successfully.Ħ) Once the compilation is completed, try to login to skype and watch the logs. #set system syslog file idp_log match RT_IDPĥ) Commit the config and check policy compilation show security idp policy-commit-status One thing I have noticed is if you dont use ip-block as ip-action, idp triggers the close-client event but login is still successful.Ģ) Apply the policy as active #set security idp idp-policy My_Policyģ) Use it in a security policy #set security policies from-zone lan to-zone wan policy local-to-wan then permit application-services idpĤ) Enable logging to see what is going on #set system syslog file idp_log any any To test how SRX blocks skype logins I have done the followings test and it worked ġ) Create a test IDP policy named show idp-policy My_Policy
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |