Tag Elements Beginning with M > <match> (configuration/security/idp/idp-policy/rulebase-exempt/
rule)

Usage

<configuration>
    <security>
        <idp>
            <idp-policy>
                <rulebase-exempt>
                    <rule>
                        <match>
                            <from-zone>from-zone-choice</from-zone>
                            <source-address>...</source-address>
                            <source-except>...</source-except>
                            <source-prefix>...</source-prefix>
                            <source-prefix-except>...</source-prefix-except>
                            <to-zone>to-zone-choice</to-zone>
                            <destination-address>...</destination-address>
                            <destination-except>...</destination-except>
                            <destination-prefix>...</destination-prefix>
                            <destination-prefix-except>...</destination-prefix-except>
                            <attacks>...</attacks>
                        </match>
                    </rule>
                </rulebase-exempt>
            </idp-policy>
        </idp>
    </security>
</configuration>

Description

Rule match criteria.

Contents

<attacks>—Match attack objects.

<destination-address>—Match destination address.

<destination-except>—Don't match destination address.

<destination-prefix>—Match destination address.

<destination-prefix-except>—Don't match destination address.

<from-zone>—Match from zone.

• any—Any zone.
• zone—Zones from security zones.

<source-address>—Match source address.

<source-except>—Don't match source address.

<source-prefix>—Match source address.

<source-prefix-except>—Don't match source address.

<to-zone>—Match to zone.

• any—Any zone.
• zone—Zones from security zones.