Configure Stateful Firewall Services

To configure stateful firewall services, you include statements at the [edit services] hierarchy level of the configuration:

[edit services]

stateful-firewall {

    rule rule-name {

        match-direction (input | output | input-output);

        term term-name {

            from {

                applications [ application-names ];

                application-sets [ set-names ];

                destination-address address;

                source-address address;

            }

            then {

                (accept | discard | reject);

                allow-ip-option [ values ];

                syslog;

            }

        }

    }

    rule-set rule-set-name {

        [ rule rule-names ];

    }

}

This chapter contains the following sections:

• Configure Stateful Firewall Properties
• Examples: Configure Stateful Firewall Properties