Default policy For SSG

[ye_line]

Hi There:

may advise the default policy in the following platform, global policy is permit or deny  :

SSG5  

SSG20

SSG140

SSG320M

SSG350M

SSG520M

SSG550M

Thanks for any feedback.

Bin

[ELKIM]

Hi

if im not wrong all juniper firewall have default policy with deny action

thanks

EL

[spuluka]

The defaut policy for any zone to zone traffic is deny.  You can override this select by placing a default allow rule at the bottom of the policy stack.

When you create a zone the default setting is to allow intrazone traffic but you can change that to deny as part of the zone configuration.