show security dynamic-policies

Name of the applicable Policy.

Status of the policy:

• enabled: The policy can be used in the policy lookup process, which determines access rights for a packet and the action taken in regard to it.

• disabled: The policy cannot be used in the policy lookup process, and therefore it is not available for access control.

An internal number associated with the policy.

Policy identifier.

Number of the policy within a given context. For example, three policies that are applicable in a from-zoneA-to-zoneB context might be ordered with sequence numbers 1, 2, and 3. Also, in a from-zoneC-to-zoneD context, four policies might have sequence numbers 1, 2, 3, and 4.

For standard display mode, the names of the source addresses for a policy. Address sets are resolved to their individual names. (In this case, only the names are given, not their IP addresses.)

For detail display mode, the names and corresponding IP addresses of the source addresses for a policy. Address sets are resolved to their individual address name-IP address pairs.

Name of the destination address (or address set) as it was entered in the destination zone’s address book. A packet’s destination address must match this value for the policy to apply to it.

Name of a preconfigured or custom application whose type the packet matches, as specified at configuration time.

• IP protocol: The IP protocol used by the application—for example, TCP, UDP, ICMP.

• ALG: If an ALG is associated with the session, the name of the ALG. Otherwise, 0.

• Inactivity timeout: Elapse time without activity after which the application is terminated.

• Source port range: The low-high source port range for the session application.

• Destination port range: The low-high destination port range for the session application.

Must be permit.

Must be dynamic.

Name of the source zone.

Name of the destination zone.

Tunnel name, type (IPsec), and index number.