Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

match (Security Policies Global)

date_range 20-Nov-23

Syntax

content_copy zoom_out_map
match {
    application {
        [application];
        any;
    }
    destination-address {
        [address];
        any;
        any-ipv4;
        any-ipv6;
    }
    destination-identity-feed feed-name
    from-zone {
        [zone-name];
        any;
    }
    source-address {
        [address];
        any;
        any-ipv4;
        any-ipv6;
    }
    source-identity {
        [role-name];
        any;
        authenticated-user;
        unauthenticated-user;
        unknown-user;
    }
    source-identity-feed feed-name;
    to-zone {
        [zone-name];
        any;
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit security policies global policy policy-name]

Description

Configure security global policy match criteria.

Note:

We recommend that, for security reasons and to avoid spoofing traffic, when you create a multizone policy you use identical matching criteria (source address, destination address, application) and an identical action. For more information see Global Policy Overview.

Options

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement modified in Junos OS Release 8.5. Statement updated with source-identity option in Junos OS Release 12.1. Statement updated with to-zone and from-zone options in Junos OS Release 12.1X47-D10.

Statement updated with source-identity-feed and destination-identity-feed options in Junos OS Release 21.1R1.
footer-navigation