Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

permit (Security Policies)

 

Syntax

Hierarchy Level

Release Information

Statement introduced in Junos OS Release 8.5. Support for the tcp-options added in Junos OS Release 10.4. Support for the services-offload option added in Junos OS Release 11.4. Support for the ssl-termination-profile and web-redirect-to-https options added in Junos OS Release 12.1X44-D10. Support for the user-firewall option added in Junos OS Release 12.1X45-D10. Support for the advanced-connection-tracking option is added in Junos OS Release 20.2R1.

You can configure the advanced-connection-tracking option under [edit security policies from-zone zone-name to-zone zone-name policy policy-name then permit] to mandate that traffic matching given policy do a lookup in the to-zone’s connection track mapping table using the new session’s key information. If there is no match, a new connection is not created.

Description

Specify the policy action to perform when packets match the defined criteria.

Options

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.