security protocol-inspection profile
security protocol-inspection profile(1) BIG-IP TMSH Manual security protocol-inspection profile(1)
NAME
profile - Configures the protocol inspection profiles.
MODULE
security protocol-inspection profile
SYNTAX
CREATE/MODIFY
modify security protocol-inspection profile
create security protocol-inspection profile
properties:
app-service [string]
auto-add-new-inspections [bool]
auto-publish-suggestion [bool]
avr-stat-collect [bool]
common-config [string]
common-config-merge-type [string]
compliance-enable [bool]
defaults-from [string]
description [string]
signature-enable [bool]
services { ... }
staging-period [integer]
DISPLAY
list security protocol-inspection profile
DESCRIPTION
Use this command to create/modify protocol inspection profile.
EXAMPLES
create security protocol-inspection profile new_http_profile { default-from protocol_inspection_http }
Create profile "new_http_profile" and clone all configuration from predefined profile
protocol_inspection_http.
list security protocol-inspection profile
Displays all protocol inspection profiles.
list security protocol-inspection profile new_http_profile
Displays protocol inspection profile with name new_http_profile.
modify security protocol-inspection profile new_http_profile common-config common_config_name
Attach common-config to the profile.
PROPERTIES
app-service [string]
Specifies app service.
auto-add-new-inspections [bool]
If set, new inspections arrived via IPS IM pkg will be automatically added to this profile for configured
service.
auto-publish-suggestion [bool]
If set, after the learning period(staging-period) the action for the inspections will automatically be
updated to the suggested action, if exists.
avr-stat-collect [bool]
Specifies if AVR collects data from IPS.
common-config [string]
Specifies common-config to be attached to the profile.
common-config-merge-type [string]
Specifies common-config value merge type.
compliance-enable [bool]
Specifies whether the compliance checks will be enabled for this profile.
signature-enable [bool]
Specifies whether the signature checks will be enabled for this profile.
defaults-from [string]
Specifies parent profile (in time of creating). If this parameter is assigned then new profile will be
cloned from parent profile.
description [string]
Specifies profile description.
services
Specifies services for this profile. ...
staging-period
If auto-publish-suggestion is set, this value defines the time period after which inspection action will
be automatically updated to suggested action.
SEE ALSO
create, modify, list, security, tmsh
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2008, 2012-2017. All rights reserved.
BIG-IP 2019-07-25 security protocol-inspection profile(1)