How to Set the PSH Flag in Netscreen

Juniper's Netscreen line of hardware firewalls can provide enterprise-level security to both small and large organizations. With the help of Juniper's Network Security Manager (NSM), formerly labeled the "Netscreen Security Manager," network administrator can implement custom security policies for their organization's network. And if you need to begin analyzing large amounts of data as soon as it becomes available, you can enable the PSH (Push) flag in NSM to push data packets through to the receiving server as soon as they become available -- you don't have to wait for the entire transfer to complete before scanning the data.

Instructions

1. Launch the NSM console. Select the "Object Manager" option from the console's hierarchical tree. Select the "Attack Objects" option, and then choose "IDP Objects."

2. Click on the "Custom Attack" tab, and then click on the "+" beneath it. Type a name for your new policy into the "Attack Name" field beneath Custom Attack menu's "General" tab. If desired, add tags and labels to the "Keywords" and "Category" fields.

3. Click on the "+" button beneath the "Attack Versions" heading, and then check the "IDP 4 and above" box.

4. Click on the "Protocols" tab. Select the "TCP Packet Header Fields" option from the tab's "TCP/UDP/ICMP" menu box. Select the "Set" option from the "PSH Bit" menu box to enable the PSH flag.

5. Click "OK" to store your settings.

References

• Juniper: Custom Attack Objects Reference and Examples Guide - Creating the Attack Object
• Juniper: Understanding Custom Attack Objects - TCP Header Fields and Flags (Table 138)