rule


            
               rule rule-name {
               
               match-direction (input | output | input-output);
               
               
                  
                     term term-name {
                     
                     
                        
                           from {
                           
                           application-sets set-name;
                           
                           applications [ application-names ];
                           
                           destination-address (address | any-unicast) <except>;
                           
                           destination-address-range low minimum-value high maximum-value <except>;
                           
                           destination-prefix-list list-name <except>;
                           
                           source-address (address | any-unicast) <except>;
                           
                           source-address-range low minimum-value high maximum-value <except>;
                           
                           source-prefix-list list-name <except>;
                           
                           }
                        
                     
                     
                        
                           then {
                           
                           (accept | discard | reject);
                           syslog;
                           
                           }
                        
                     
                     }
                  
               
               }


            
               [edit services stateful-firewall],
               
               [edit services stateful-firewall rule-set rule-set-name]

Syntax

Hierarchy Level

Release Information

Description

Options

Usage Guidelines

Required Privilege Level