root@SRX340-1-Rack104> file show /var/db/scripts/commit/templates.xsl
<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:junos="http://xml.juniper.net/junos/*/junos" xmlns:xnm="http://xml.juniper.net/xnm/1.1/xnm" xmlns:jcs="http://xml.juniper.net/junos/commit-scripts/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://services.netscreen.com" version="1.0" xsi:noNamespaceSchemaLocation="http://services.netscreen.com/xmlupdate/Templates.xsd">
<xsl:import href="../import/junos.xsl"/>
<xsl:template match="configuration">
<xsl:call-template name="delete-me">
<xsl:with-param name="policy">DMZ_Services</xsl:with-param>
</xsl:call-template>
<xsl:call-template name="delete-me">
<xsl:with-param name="policy">DNS_Service</xsl:with-param>
</xsl:call-template>
<xsl:call-template name="delete-me">
<xsl:with-param name="policy">File_Server</xsl:with-param>
</xsl:call-template>
<xsl:call-template name="delete-me">
<xsl:with-param name="policy">Getting_Started</xsl:with-param>
</xsl:call-template>
<xsl:call-template name="delete-me">
<xsl:with-param name="policy">IDP_Default</xsl:with-param>
</xsl:call-template>
<xsl:call-template name="delete-me">
<xsl:with-param name="policy">Recommended</xsl:with-param>
</xsl:call-template>
<xsl:call-template name="delete-me">
<xsl:with-param name="policy">Web_Server</xsl:with-param>
</xsl:call-template>
<change>
<security>
<idp>
<idp-policy>
<name>Web_Server</name>
<comment>This template policy is designed to protect commonly used HTTP servers from remote attacks.</comment>
<rulebase-ips>
<rule>
<name>1</name>
<junos:comment>This rule drops all packets that should not occur on a clean network, and can be used by attackers to evade IDSs. This rule is necessary to harden the IDP against evasion attempts.</junos:comment>
<match>
<from-zone>any</from-zone>
|