application-screen (Security SIP)
Syntax
application-screen {
protect {
deny {
all {
timeout value-in-seconds;
}
destination-ip address;
timeout value-in-seconds;
}
}
unknown-message {
permit-nat-applied;
permit-routed;
}
}
Hierarchy Level
[edit logical-systems name security alg sip], [edit logical-systems name tenants name security alg sip], [edit security alg sip], [edit services alg sip], [edit tenants name security alg sip]
Description
Configure the security screens for the Session Initiation Protocol (SIP) Application Layer Gateway (ALG) to handle unknown-messages and protect SIP server.
IPv6 is supported on the SIP ALG along with Network Address Translation Protocol Translation (NAT-PT) mode and NAT64 address translation.
The type of the <destination-ip-address> is changed from IPv4 address to IP prefix to support all kinds of IP addresses, and correspondingly a prefix is supported to allow multiple IP addresses.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 8.5.