close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

rule (casb-policy)

date_range 23-May-24

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
      
        rules rule-name {
            match {
                  application application-name {
		        activity activity-name {
		        [param-name param-value param-name param-value]
		        }	
		    instance instance-name;
	           }
	          application-group application-group-name {
                     activity activity-name 		        		          
                 }     
            }
            then {
	        allow;
               deny;
               log-action;
            }
        }
        
    

Hierarchy Level

content_copy zoom_out_map
[edit security casb casb-policy policy-name]

Description

Configure Cloud Access Security Broker (CASB) policy rule. CASB policy rule includes set of match criteria defining the conditions that must be satisfied to apply the policy and a set of actions to be performed in case of a match—allow, deny, or log actions.

Options

match rule-name

Define a match criteria for matching the traffic in CASB policy rule. You can specify following:

application application-name—Enter the supported application name.
application-group application-group-name—Enter the supported application-group name.
activity—Configure activity-parameters for shared-activity option. You can configure this optional statement to have even more granular control over traffic.
instance instance-name—Enter an application instance.

then

Define the action for the match condition by specifying—allow/deny and log-actions.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 24.2R1.

arrow_backward PREVIOUS rule (Captive Portal Content Delivery)

NEXT arrow_forward rule-deactivation-time

Junos CLI Reference

ON THIS PAGE