UTM Antispam Filtering for Security Devices - Juniper Networks

UTM Antispam Filtering for Security Devices
Example: Configuring Local List Antispam Filtering
Requirements
Overview
Configuration
22
CLI Quick
Configuration
GUI Step-by-Step
Procedure
This example shows how to configure local list antispam filtering.
• Requirements on page 22
• Overview on page 22
• Configuration on page 22
• Verification on page 27
Before you begin, review how to configure the feature parameters for each UTM feature.
See “Local List Antispam Filtering Configuration Overview” on page 21.
Antispam filtering uses local lists for matching. When creating your own local whitelist
and blacklist for antispam filtering, you can filter against domain names, e-mail addresses,
and/or IP addresses.
To quickly configure this example, copy the following commands, paste them into a text
file, remove any line breaks, change any details necessary to match your network
configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy
level.
set security utm custom-objects url-pattern as-black value [150.61.8.134]
set security utm custom-objects url-pattern as-white value [150.1.2.3]
set security utm feature-profile anti-spam address-whitelist as-white
set security utm feature-profile anti-spam sbl profile localprofile1
set security utm feature-profile anti-spam sbl profile localprofile1 spam-action block
set security utm feature-profile anti-spam sbl profile localprofile1 custom-tag-string
***spam***
set security utm utm-policy spampolicy2 anti-spam smtp-profile localprofile1
set security policies from-zone trust to-zone untrust policy utmsecuritypolicy2 match
source-address any
set security policies from-zone trust to-zone untrust policy utmsecuritypolicy2 match
destination-address any
set security policies from-zone trust to-zone untrust policy utmsecuritypolicy2 match
application junos-smtp
set security policies from-zone trust to-zone untrust policy utmsecuritypolicy2 then permit
application-services utm-policy spampolicy2
To configure local list antispam filtering:
1.
Create local whitelist and blacklist custom objects by configuring a URL pattern list.
a. Select Configure>Security>UTM>Custom Objects.
b. In the UTM custom objects configuration window, select the URL Pattern List tab.
c. Click Add to create URL pattern lists.
Copyright © 2013, Juniper Networks, Inc.