match (Security Policies Global)
Syntax
match {
application {
[application];
any;
}
destination-address {
[address];
any;
any-ipv4;
any-ipv6;
}
destination-identity-feed feed-name
from-zone {
[zone-name];
any;
}
source-address {
[address];
any;
any-ipv4;
any-ipv6;
}
source-identity {
[role-name];
any;
authenticated-user;
unauthenticated-user;
unknown-user;
}
source-identity-feed feed-name;
to-zone {
[zone-name];
any;
}
}
Hierarchy Level
[edit security policies global policy policy-name]
Description
Configure security global policy match criteria.
Note:
We recommend that, for security reasons and to avoid spoofing traffic, when you create a multizone policy you use identical matching criteria (source address, destination address, application) and an identical action. For more information see Global Policy Overview.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement modified in Junos OS Release 8.5. Statement
updated with source-identity option in Junos OS Release 12.1.
Statement updated with to-zone and from-zone
options in Junos OS Release 12.1X47-D10.
source-identity-feed and destination-identity-feed
options in Junos OS Release 21.1R1.