Help Center User GuideGetting StartedFAQRelease Notes
 
X
User Guide
Getting Started
FAQ
Release Notes
Contents  

Promoting to Group Policy

Before You Begin

If your policy type is a device policy, then you can promote the policy to a group policy.

Procedure

To promote a device policy to a group policy:

  1. Select Configure > Firewall Policy.

    The Policies page is displayed.

  2. Select a policy, right-click the policy or select Promote to Group Policy from the More list.

    The Promote to Group Policy page is displayed.

    Note The Promote to Group Policy option is enabled only when the policy type is device policy.

  3. Enter the parameters according to the guidelines in Table 143.
  4. Click OK.

    The policy is promoted from device policy to group policy.

Table 143: Promoting a device policy to a group policy

Field

Description

General Information

Name

Enter a unique string of alphanumeric characters, colons, periods, dashes, and underscores. Maximum length is 255 characters.

Description

Enter a description for the group policy rules; maximum length is 255 characters. Comments entered in this field are sent to the device.

Policy Options

Profile

Select a profile for the policy:

  • Log Session Init—Record entries for session start events. A traffic log that records session start events does not include bytes sent and received or session duration. You can use the log to verify when the session was initially created.

  • Log Session Close—Record entries for session close events. A traffic log that records session close information also lists a reason for the end of the session.

  • All Logging Enabled—Logs are created for both session initiation and session closing. Logs can be used for troubleshooting.

  • All Logging Disabled—Logs are not recorded for both session initiation and session closing.

Policy Sequence

Placement

This is applicable for Group Policy only. Select Before device-specific policies or After device-specific policies. This decides the policy order when the devices policy configuration information is updated on the devices.

Sequence No.

This is applicable for Group Policy only. Select this option to specify the order number for the policy. Policy lookup is performed in the order that the policies are configured. The first policy that matches the traffic is used. For more information, see Policy Ordering Overview.

Related Documentation

Help us to improve. Rate this article.
Feedback Received. Thank You!

Ask questions in TechWiki

Check documentation in TechLibrary

Rating by you:      
X

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:
Email:

Need product assistance? Contact Juniper Support

Submit