Import Security Policies

Manually import a security policy from discovered or onboarded SRX Series Firewall devices.

You can import security policy from an individual device in a multinode high availability (MNHA) pair. If you want to use the same policy on both the devices, deploy the imported policy on to the paired device.

To import a security policy:

Select Security > Security Policies.

The Security Policy page is displayed.
Click Import.
The Import Security Policies page is displayed containing a list of discovered next generation security devices.
Select the device to import the security policies and click Next.

The Discovered Services page is displayed.
Select the Security Policy and NAT policy services to import and click Next.

The Resolve Conflicts page is displayed.

For any conflicts with the imported security policy objects, the object conflict resolution (OCR) operation is triggered. The Conflicts window displays the conflicts between Juniper Security Director Cloud and the next-generation security device.
Select an object from the Conflicts window and click one of the following options to resolve the security policy object conflict:
- Rename Object—Rename the imported object. By default, the _1 suffix is added to the object name. You can also specify a new name.
- Overwrite with imported value—The object in Juniper Security Director Cloud is replaced with the object from the imported security policy.
- Keep existing object—The existing object name in Juniper Security Director Cloud is retained and the imported security policy object from the next-generation security device is discarded.
Click Finish.

A summary of the discovered services is displayed.
Review the summary and click OK to import the security policies.

The security policies from the next-generation security device are imported to Juniper Security Director Cloud. You can view the imported policy on the Security Policies page.

Import Security Policies

Related Documentation