dynamic-application
Syntax
dynamic-application [system-application];
Hierarchy Level
[edit security application-firewall rule-sets rule-set-name rule rule-name match]
Description
Specify the dynamic application names for match criteria in application firewall rule set.
An application firewall configuration permits, rejects, or denies traffic based on the application of the traffic. The AppFW consists of one or more rule sets with rules that specify match criteria, including dynamic applications, and the action to be taken for matching traffic.
The junos:UNKNOWN keyword is reserved for unknown dynamic applications. In the following cases, the application ID is set to junos:UNKNOWN:
The traffic does not match an application signature in the database.
The system encounters an error when identifying the application.
The session fails over to another device.
Traffic with an application ID of junos:UNKNOWN matches a rule with a dynamic application of junos:UNKNOWN. If there is no rule defined for junos:UNKNOWN, the default rule is applied.
Starting in Junos OS Release 18.2R1 application firewall (AppFW)
functionality is deprecated. As a part of this change, the [edit
security application-firewall] hierarchy and all the configuration
options under this hierarchy are deprecated— rather than immediately
removed—to provide backward compatibility and a chance to bring
your configuration into compliance with the new configuration.
Options
system-application—Set of system applications for match criteria.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 11.1.