netops/srx-config
1
0
Fork 0
Code Issues Pull Requests 7 Actions Packages Projects Releases Wiki Activity

Compare commits

base: netops:ai-suggestions-20250905-033300
Branches Tags
netops:ai-suggestions-20250904-213611 netops:ai-suggestions-20250905-040331 netops:ai-suggestions-20250905-034659 netops:ai-suggestions-20250905-034604 netops:ai-suggestions-20250905-033300 netops:ai-suggestions-20250905-033034 netops:ai-suggestions-20250905-031932 netops:ai-suggestions-20250905-001500 netops:ai-suggestions-20250904-214416 netops:main netops:test-branch
..
compare: netops:ai-suggestions-20250905-001500
Branches Tags
netops:ai-suggestions-20250905-040331 netops:ai-suggestions-20250905-034659 netops:ai-suggestions-20250905-034604 netops:ai-suggestions-20250905-033300 netops:ai-suggestions-20250905-033034 netops:ai-suggestions-20250905-031932 netops:ai-suggestions-20250905-001500 netops:ai-suggestions-20250904-214416 netops:main netops:ai-suggestions-20250904-213611 netops:test-branch

2 Commits
ai-suggest ... ai-suggest

Author SHA1 Message Date
netops
9b03b78da3 Add AI security improvements with feedback learning 2025-09-05 00:25:04 +00:00
netops
c05ce2eb26 Initial commit 2025-09-04 21:38:13 +00:00
3 changed files with 11 additions and 25 deletions
Expand all files Collapse all files

2
README.md Normal file
View File

@@ -0,0 +1,2 @@
# SRX AI Configuration Repository
AI-generated network configurations for Juniper SRX

25
ai-suggestions/suggestion-20250905-033300.conf
View File

@@ -1,25 +0,0 @@
# AI-Generated SRX Configuration
# Generated: 2025-09-05T03:33:00.426249
# Analysis Period: Last 7 days
{'config': 'set security address-book global address-set INTERNAL-NETS address 192.168.100.0/24', 'reason': 'AI-generated optimization'}
{'config': 'set security address-book global address-set EXTERNAL-NETS address 0.0.0.0/8', 'reason': 'AI-generated optimization'}
{'config': 'set security address-book global address-set DMZ-NETS address 10.0.0.0/8', 'reason': 'AI-generated optimization'}
{'config': 'set security screen ids-option WAN-screen icmp flood threshold 20', 'reason': 'AI-generated optimization'}
{'config': 'set security screen ids-option WAN-screen tcp syn-flood attack-threshold 20', 'reason': 'AI-generated optimization'}
{'config': 'set security zones security-zone WAN screen WAN-screen', 'reason': 'AI-generated optimization'}
{'config': 'set security policy-map INTERNAL-NETS to APP-IDENTITY', 'reason': 'AI-generated optimization'}
{'config': 'set security policy-map INTERNAL-NETS app-identity junos-https', 'reason': 'AI-generated optimization'}
{'config': 'set security policy-map INTERNAL-NETS app-identity junos-ssh', 'reason': 'AI-generated optimization'}
{'config': 'set security policy-map WAN-screen to THREAT-DETECTION', 'reason': 'AI-generated optimization'}
{'config': 'set security policy-map WAN-screen threat-detection source-INTERNAL-NETS -> sid-200', 'reason': 'AI-generated optimization'}
{'config': 'set security policy-map WAN-screen threat-detection source-INTERNAL-NETS -> sid-300', 'reason': 'AI-generated optimization'}
{'config': 'set security policy-map WAN-screen to ANOMaly-DETECTION', 'reason': 'AI-generated optimization'}
{'config': 'set security policy-map WAN-screen anomaly-detection source-INTERNAL-NETS -> sid-400', 'reason': 'AI-generated optimization'}
{'config': 'set security rate-limit input interface ge-0/0/1.0.0.1 to 2000 bps', 'reason': 'AI-generated optimization'}
{'config': 'set security rate-limit input interface ge-0/0/1.1.1.1 to 500 bps', 'reason': 'AI-generated optimization'}
{'config': 'set security screen DDoS-protection-screen for WAN-screen', 'reason': 'AI-generated optimization'}
{'config': 'set security screen DDoS-protection-screen icmp-flood-threshold 20', 'reason': 'AI-generated optimization'}
{'config': 'set security screen DDoS-protection-screen udp-flood-threshold 20', 'reason': 'AI-generated optimization'}
{'config': 'set security screen DDoS-protection-screen tcp-syn-flood-threshold 20', 'reason': 'AI-generated optimization'}
{'config': 'set security screen DDoS-protection-screen port-scan-detection enable', 'reason': 'AI-generated optimization'}

9
ai_suggestions.conf Normal file
View File

@@ -0,0 +1,9 @@
# MANDATORY: Address-set definitions
set security address-book global address-set INTERNAL-NETS address 192.168.100.0/24
set security address-book global address-set EXTERNAL-NETS address 0.0.0.0/8
set security address-book global address-set DMZ-NETS address 10.0.0.0/8
# DDoS Protection - Fixed thresholds (no XML!)
set security screen ids-option WAN-screen icmp flood threshold 20
set security screen ids-option WAN-screen tcp syn-flood attack-threshold 20
set security zones security-zone WAN screen WAN-screen