From the course: Juniper Security Policies Fundamentals

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Importance of policy ordering

Importance of policy ordering

From the course: Juniper Security Policies Fundamentals

Start my 1-month free trial

Importance of policy ordering

- [Instructor] Policy ordering is an important thing to consider and keep in mind while designing your security policies. We understood in an earlier movie, incorrectly ordered security policies may not process traffic the way we want it to, and may also cause traffic to be dropped. Security policies are always evaluated from top to bottom. The first policy to match all criteria will be applied to the incoming traffic. The policy must match all criteria. Partial matches are not allowed. If the first policy is not a match, it moves to the next one, and so on until it finds a match. If there is no match, the last policy is applied. The last policy is the default policy. The default action of this policy is to deny all traffic. This can be changed. All new policies are added to the bottom of the list. Policies can be reordered using the insert command. Let's first go to the configuration mode using the edit command. And let's start with show security policies. Show security policies. I'm…

Contents