Which configuration statement would allow the SRX Series device to match a signature only
on the first match, and not subsequent signature matches in a connection?
A.
user@host# set security idp idp-policy test rulebase-ips rule 1 then action recommended
B.
user@host# set security idp idp-policy test rulebase-ips rule 1 then action
ignore-connection
C.
user@host# set security idp idp-policy test rulebase-ips rule 1 then action no-action
D.
user@host# set security idp idp-policy test rulebase-ips rule 1 then action
drop-connection
Ignore Connection
Stops scanning traffic for the rest of the connection if an attack match is found. IDP disables the rulebase for the specific connection.
Note: This action does not mean ignore an attack.
0
0