firewall profile-group
Use this command to create profile groups. A profile group can contain an antivirus profile, IPS sensor, web filter profile, email filter profile, DLP sensor, application control list, a VoIP profile, an MMS profile and a replacement message group. You can use a profile group in a firewall policy if you set the firewall policy profile-type
field to group
.
config firewall profile-group edit {name} # Configure profile groups. set name {string} Profile group name. size[35] set av-profile {string} Name of an existing Antivirus profile. size[35] - datasource(s): antivirus.profile.name set webfilter-profile {string} Name of an existing Web filter profile. size[35] - datasource(s): webfilter.profile.name set dnsfilter-profile {string} Name of an existing DNS filter profile. size[35] - datasource(s): dnsfilter.profile.name set spamfilter-profile {string} Name of an existing Spam filter profile. size[35] - datasource(s): spamfilter.profile.name set dlp-sensor {string} Name of an existing DLP sensor. size[35] - datasource(s): dlp.sensor.name set ips-sensor {string} Name of an existing IPS sensor. size[35] - datasource(s): ips.sensor.name set application-list {string} Name of an existing Application list. size[35] - datasource(s): application.list.name set voip-profile {string} Name of an existing VoIP profile. size[35] - datasource(s): voip.profile.name set icap-profile {string} Name of an existing ICAP profile. size[35] - datasource(s): icap.profile.name set waf-profile {string} Name of an existing Web application firewall profile. size[35] - datasource(s): waf.profile.name set ssh-filter-profile {string} Name of an existing SSH filter profile. size[35] - datasource(s): ssh-filter.profile.name set profile-protocol-options {string} Name of an existing Protocol options profile. size[35] - datasource(s): firewall.profile-protocol-options.name set ssl-ssh-profile {string} Name of an existing SSL SSH profile. size[35] - datasource(s): firewall.ssl-ssh-profile.name next end
Additional information
The following section is for those options that require additional explanation.