J-Web Configuration

To configure policies using the J-Web configuration editor:

Select Configuration>View and Edit>Edit Configuration.
The Configuration page appears.
Next to Interfaces, click Configure.
Next to Interface, click Add new entry.
In the Interface name box, type ge-0/0/1.
Next to Unit, click Add new entry.
In the Interface unit number box, type 0.
Under Family, select inet and click Configure.
Next to Address, click Add new entry.
In the Source box, type 10.1.1.1/24 and click OK.
To configure the other interfaces such as ge-0/0/2 and ge-0/0/3 and addresses such as 1.2.2.1/24 and 1.1.1.1/24, repeat Step 2 through Step 9 and click OK.

To configure interfaces:

Select Configuration>View and Edit>Edit Configuration.
The Configuration page appears.
Next to Security, click Configure or Edit.
Next to Zones, click Configure or Edit.
Next to Security zones, click Add new entry.
In the Name box, type internal.
Next to Interfaces, click Add new entry.
In the Interface unit box, type ge-0/0/1.0 and click OK.
To configure security zones such as dmz and external, and interfaces such as ge-0/0/2.0 and ge-0/0/3.0, repeat Step 3 through Step 7 and click OK.

To configure addresses:

Select Configuration>View and Edit>Edit Configuration.
The Configuration page appears.
Next to Security, click Configure or Edit.
Next to Zones, click Configure or Edit.
Next to Security zones, click Add new entry.
In the Name box, type internal.
Next to the Address book, click Configure or Edit.
Next to Address, click Add new entry.
In the Address name box, type corp_net 10.1.1.0/24 and click OK.
To configure more security zones such as dmz and external, and address books entries such as mail_svr 1.2.2.5/32 and r-mail_svr 2.2.2.5/32, repeat Step 3 through Step 8 and click OK.

To configure application sets:

Select Configuration>View and Edit>Edit Configuration.
The Configuration page appears.
Next to Applications, click Configure or Edit.
Next to Application set, click Add new entry.
In the Application set name box, type MAIL-POP3.
In the Application name box, type junos-mail and click OK,

To create Policies:

Select Configuration>View and Edit>Edit Configuration.
The Configuration page appears.
Next to Policy, select the check box and click Configure.
Next to Policy, click Add new entry.
In the From zone name box, type internal.
In the To zone name box, type dmz corp_net.
Next to Policy, click Add new entry.
In the Policy name box, type Pol1.
Select the Match check box.
Select the Then check box.
Next to Match, click Configure.
To match the policy to an application name, from the Source address choice list, select Source address.
Next to Source address, click Add new entry.
From the Value keyword list, select Enter specific value.
To specify the address of the address book, In the Address box, type corp_net and click OK.
To match the policy to a destination address, from the Destination address choice list, select Destination address.
Next to Destination address, click Add new entry.
In the Value keyword list, select Enter specific value.
To specify the destination address for the policy, in the Address box, type mail_svr and click OK.
To match the policy to an application set name, from the Application Choice list, select Application.
Next to Application, click Add new entry.
To specify the application set name to match the policy, from the Value keyword list, type MAIL-POP3 and click OK.
Next to Then, click Configure.
From the Action list, select Permit and click OK.
If you are finished configuring the device, commit the configuration.
To check the configuration, see Verifying Policy Configuration.