permit (Security Policies)
Syntax
Hierarchy Level
Release Information
Statement introduced in Junos OS Release 8.5. Support for the tcp-options added in Junos OS Release 10.4. Support for the services-offload option added in Junos OS Release 11.4. Support for the ssl-termination-profile and web-redirect-to-https options added in Junos OS Release 12.1X44-D10. Support for the user-firewall option added in Junos OS Release 12.1X45-D10. Support for the advanced-connection-tracking option is added in Junos OS Release 20.2R1.
You can configure the advanced-connection-tracking option under [edit security policies from-zone zone-name to-zone zone-name policy policy-name then permit] to mandate that traffic matching given policy do a lookup in the to-zone’s connection track mapping table using the new session’s key information. If there is no match, a new connection is not created.
Description
Specify the policy action to perform when packets match the defined criteria.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.