- permit {
- application-services (wx-redirect
| wx-reverse-redirect);
-
- destination-address {
- drop-translated;
- drop-untranslated;
- }
- destination-nat destination-name ;
-
- firewall-authentication
{
-
- pass-through {
- access-profile profile-name ;
- client-match match-name ;
- web-redirect;
- }
-
- web-authentication {
- client-match user-or-group
;
- }
- }
- source-nat (pool pool-name | pool-set pool-set-name
| interface);
-
- tunnel {
- ipsec-vpn vpn-name ;
- pair-policy pair-policy ;
- }
- }
- [edit security policies
from-zone zone-name to-zone zone-name policy policy-name then]
Statement introduced in Release 8.5 of JUNOS software.
Specify the policy action to perform when packets match the defined criteria.
This statement is supported on J-series and SRX-series devices.
The remaining statements are explained separately.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.