SRX

Is there a less than obvious way to put comments into security policies and address-books?

stupid google just finds some form of "leave a comment" in every blog on the internet making it a bit tricky to search for =/

If not, what are you doing to document your security policy justifications?

Thanks

Mark

You can add comments anywhere in a configuration with the annotate command.  Just navigagte to the policy and put in your comment.

http://www.juniper.net/techpubs/en_US/junos10.4/topics/task/configuration/junos-software-configuration-comments-adding.html

You may also be interested in this white paper on implementing PCI.  This oulines what an autidor is looking for and their implementation in Juniper systems.

http://www.juniper.net/us/en/local/pdf/whitepapers/2000268-en.pdf

Thanks!  I figured there was some method I was missing, "comments" is just a hard word to search

Thanks for the link to the PCI pdf too!

is there a way to annotate using the J-WEB or is this currently limited to the CLI ?