- default-policy {
- (deny-all | permit-all);
- }
- [edit security policies]
Statement introduced in Release 8.5 of JUNOS software.
Configure the default security policy that defines the actions the device takes on a packet that does not match any user-defined policy.
This statement is supported on J-series and SRX-series devices.
deny-all—Deny all traffic. Packets are dropped. This is the default.
permit-all—Permit all traffic that does not match a policy.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.