config ssh-filter profile
SSH filter profile.
config ssh-filter profile
Description: SSH filter profile.
edit <name>
set block {option1}, {option2}, ...
set log {option1}, {option2}, ...
set default-command-log [enable|disable]
config shell-commands
Description: SSH command filter.
edit <id>
set type [simple|regex]
set pattern {string}
set action [block|allow]
set log [enable|disable]
set alert [enable|disable]
set severity [low|medium|...]
next
end
next
end
config ssh-filter profile
|
Parameter name |
Description |
Type |
Size |
||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
block |
SSH blocking options. |
option |
- |
||||||||||||||||||
|
|
|
||||||||||||||||||||
|
log |
SSH logging options. |
option |
- |
||||||||||||||||||
|
|
|
||||||||||||||||||||
|
default-command-log |
Enable/disable logging unmatched shell commands. |
option |
- |
||||||||||||||||||
|
|
|
||||||||||||||||||||
config shell-commands
|
Parameter name |
Description |
Type |
Size |
||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
type |
Matching type. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
pattern |
SSH shell command pattern. |
string |
Maximum length: 128 |
||||||||||
|
action |
Action to take for SSH shell command matches. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
log |
Enable/disable logging. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
alert |
Enable/disable alert. |
option |
- |
||||||||||
|
|
|
||||||||||||
|
severity |
Log severity. |
option |
- |
||||||||||
|
|
|
||||||||||||