SRX

Hello Expert

What is the order of global security policy and zone specific policy? Means first all zone based policies are evaluated and then all global policies will be evaluated?

Hi aeroplane,

Yes, that is the order first all zone specific polices are tested/checked and if the packet doesn't apply to any of the zone "contextes" then after that the global zone policy is applied and checked.

Here is a reference from Juniper on it with more details if you like :

"For example, if a policy lookup is performed, regular security policies have priority over global policies. Therefore, in a policy lookup, regular security policies are searched first and if there is no match, global policy lookup is performed."

https://www.juniper.net/techpubs/en_US/junos13.1/topics/concept/security-policy-global-policy-overview.html

Thank you