policies
Syntax
policies {default-policy {(deny-all | permit-all);}from-zone zone-name to-zone zone-name
{policy
policy-name {match {application [ application-name-or-set
];destination-address { address-name
;}source-address { address-name
; }}scheduler-name scheduler-name
;then {count {alarm {per-minute-threshold number;
per-second-threshold number
;}}(deny | reject);permit {application-services (wx-redirect
| wx-reverse-redirect);destination-address {drop-translated;drop-untranslated;}firewall-authentication
{pass-through {access-profile profile-name
;client-match match-name
;web-redirect;}web-authentication {client-match user-or-group
;}}tunnel {ipsec-vpn vpn-name
;pair-policy pair-policy
;}}log {session-close;session-init;}}}}policy-rematch;traceoptions {file
filename <files number > <size maximum-file-size > <world-readable | no-world-readable>;flag
flag ;}}
Hierarchy Level
[edit security]
Release Information
Statement introduced in Release 8.5 of JUNOS Software.
Description
Configure network security policies.
Usage Guidelines
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
