Example: Configuring Applications and Application Sets

This example shows how to configure applications and application sets.

• Requirements
• Overview
• Configuration
• Verification

Requirements

Before you begin, configure the required applications. See Policy Application Sets Overview.

Overview

Rather than creating or adding multiple individual application names to a policy, you can create an application set and refer to the name of the set in a policy. For example, for a group of employees, you can create an application set that contains all the approved applications.

In this example, you create an application set that are used to log into the servers in the ABC (intranet) zone, to access the database, and to transfer files.

• Define the applications in the configured application set.
• Managers in zone A and managers in zone B use these services. Therefore, give the application set a generic name, such as MgrAppSet.
• Create an application set for the applications that are used for e-mail and Web-based applications that are delivered by the two servers in the external zone.

Configuration

Step-by-Step Procedure

To configure an application and application set:

1. Create an application set for managers.
   [edit applications]user@host# set application-set MgrAppSet application junos-sshuser@host# set application-set MgrAppSet application junos-telnet
2. Create another application set for e-mail and Web-based Example: Setting a Policy Application Time applications.
   [edit applications]user@host# set application-set WebMailApps application junos-smtpuser@host# set application-set WebMailApps application junos-pop3
3. If you are done configuring the device, commit the configuration.
   [edit]user@host# commit

Verification

To verify the configuration is working properly, enter the show applications command.

Purpose

Action

Related Topics

• Junos OS Feature Support Reference for SRX Series and J Series Devices
• Security Policies Overview
• Security Policy Applications Overview