QuestionQ87

Security Policies

What is the processing order for the first path packet when a packet enters a device?

  • A security policies –> screens –> zones
  • B screens –> security policies –> zones
  • C screens –> zones –> security policies
  • D security policies –> zones –> screens
Explanation

On an SRX device, screens are applied at packet ingress before flow processing. The ingress and egress zones are then determined, and their zone pair identifies the security-policy context used to evaluate the first packet of the flow.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!