Configure Applications

You can define application protocols for the stateful firewall and Network Address Translation (NAT) services to use in match condition rules. An application protocol defines application parameters using information from network Layer 3 and above. Examples of such applications are FTP and H.323.

To configure applications that are used with services, you include statements at the [edit applications] hierarchy level of the configuration:

[edit applications]

application application-name {

    application-protocol protocol-name;

    destination-port port-number;

    icmp-code value;

    icmp-type value;

    inactivity-timeout value;

    protocol type;

    rpc-program-number number;

    snmp-command command;

    source-port port-number;

    ttl-threshold value;

    uuid hex-value;

    }

}

application-set application-set-name {

    [ application application-names ];

}

This chapter includes the following sections:

• Configure Application Protocol Properties
• Configure Application Sets
• Examples: Configure Applications