security ip-intelligence global-policy
security ip-intelligence globaBIG-IPcsecurityuip-intelligence global-policy(1)
NAME
global-policy - Configures the global ip-intelligence policy. These
ip-intelligence policy contents/filters are applied to all packets
except those going through the management interface. They are applied
first, before any firewall rules for the packet's virtual server, route
domain.
MODULE
security ip-intelligence
SYNTAX
Modify the global-policy component within the security ip-intelligence
module using the syntax shown in the following sections.
MODIFY
modify global-policy
options:
app-service [name]
description [string]
ip-intelligence-policy [ [policy_name] | none ]
edit global-policy
options:
all-properties
non-default-properties
one-line
partition
recursive
reset-stats global-policy
options:
ip-intelligence-categories
DISPLAY
list global-policy
show running-config global-policy
options:
all-properties
non-default-properties
one-line
partition
recursive
show global-policy
options:
ip-intelligence-categories
DESCRIPTION
You can use the global-policy component to configure a shareable and
reusable set of network firewall DWBL (Dynamic White/Black lists) which
can be enforced globally at the system level and the enforcement
happens before the route-domain or virtual server level.
EXAMPLES
modify global-policy policy pol1
Modifies the global-policy with policy pol1.
list global-policy
Displays the current list of global-policy contents.
OPTIONS
app-service
Specifies the application service to which the object belongs. The
default value is none. Note: If the strict-updates option is
enabled on the Application Service that owns the object, you
cannot modify or delete the object. Only the Application Service
can modify or delete the object.
description
User defined description.
policy
Specifies an existing policy. policy contents are enforced at a
global level.
partition
Displays the administrative partition within which the component
resides.
ip-intelligence-categories
Used to show/ reset statistics on IP intelligence white/ black
lists categories.
SEE ALSO
create, edit, list, modify, security ip-intelligence feed-list,
security ip-intelligence policy, tmsh
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or
by any means, electronic or mechanical, including photocopying,
recording, or information storage and retrieval systems, for any
purpose other than the purchaser's personal use, without the express
written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2008, 2012-2013, 2015. All rights
reserved.
BIG-IP 201security ip-intelligence global-policy(1)