config ssh-filter profile
Configure SSH filter profile.
config ssh-filter profile
Description: Configure SSH filter profile.
edit <name>
set block {option1}, {option2}, ...
set log {option1}, {option2}, ...
set default-command-log [enable|disable]
config shell-commands
Description: SSH command filter.
edit <id>
set type [simple|regex]
set pattern {string}
set action [block|allow]
set log [enable|disable]
set alert [enable|disable]
set severity [low|medium|...]
next
end
next
end
config ssh-filter profile
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
block |
SSH blocking options. |
option |
- |
|
||||||||||||||||||
|
|
|
|||||||||||||||||||||
|
log |
SSH logging options. |
option |
- |
|
||||||||||||||||||
|
|
|
|||||||||||||||||||||
|
default-command-log |
Enable/disable logging unmatched shell commands. |
option |
- |
disable |
||||||||||||||||||
|
|
|
|||||||||||||||||||||
config shell-commands
|
Parameter |
Description |
Type |
Size |
Default |
||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
type |
Matching type. |
option |
- |
simple |
||||||||||
|
|
|
|||||||||||||
|
pattern |
SSH shell command pattern. |
string |
Maximum length: 128 |
|
||||||||||
|
action |
Action to take for SSH shell command matches. |
option |
- |
block |
||||||||||
|
|
|
|||||||||||||
|
log |
Enable/disable logging. |
option |
- |
disable |
||||||||||
|
|
|
|||||||||||||
|
alert |
Enable/disable alert. |
option |
- |
disable |
||||||||||
|
|
|
|||||||||||||
|
severity |
Log severity. |
option |
- |
medium |
||||||||||
|
|
|
|||||||||||||