If you're running 10.3 or newer (and you probably should be on 10.4R4 or R5 as that's the recommended release) you can just try it out and see how it works. You can find more information under Chapter 6 in the Junos Security Admin Guide. It's fairly self-explanatory, but you can define criteria such as source and destination IPs and port numbers for a "test" packet, as if to ask the firewall, "What would happen if a packet that looked like this came through this device?" You will see information such as what policy the packet would match, if it would be permitted or denied, etc.
Show log traffic-log | match "Permit-Web-Traffic"Ģ- Could you please explain little bit "show security match-policies" You can use the "match" filtering function of Junos to look for the specific policy name: 1- If I want to see the logs for a specific policy, how can I do this because "show log " which is capturing the RT_FLOW_SESSION is showing logs for all policies.
0 kommentar(er)
