You are asked to ensure that your IPS engine blocks attacks. You must ensure that your
system continues to drop additional malicious traffic without additional IPS processing for up
to 30 minutes. You must ensure that the SRX Series device does send a notification packet
when the traffic is dropped. Which statement is correct?
A.
Use the Drop Packet action.
B.
Use the Drop Connection action.
C.
Use the IP-Close action.
D.
Use the IP-Block action.
D
JNCIE Sec 8-20
0
0
https://kb.juniper.net/InfoCenter/index?page=content&id=KB25558&actp=search
0
0
C- Close action –Close action does send notification not like Block which silently drop the packet.
0
0
IP-Close
Description
Close future connections of any new sessions that match the IP action by sending RST packets to the client and server.
0
0