from-zone trust to-zone untrust-hkbn { policy IPCamer-test { match { source-address staff_192.168.0.55; destination-address any; application IPCamera; } then { permit; } } inactive: policy techtrans-testing { match { source-address apps_192.168.0.86; destination-address any; application [ junos-https junos-http ]; } then { permit { application-services { utm-policy aster-ewf-taobao-fb; } } } } policy aster-tb-fb-alipay { match { source-address [ 172_vivi wilson_notebook_192.168.0.176 staff_192.168.0.135 192.168.0.51 192.168.0.61 192.168.0.137_IMAC 192.168.0.218_imacold 192.168.0.148 marketing2 anna-151 maggie_192.168.0.18 cara_192.168.0.53 crystal-54 ]; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-tb-fb-alipay; } } } } policy ewf-ip17 { match { source-address staff_192.168.0.17; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster_ewf-ip17; } } } } policy ewf-taobao-fb { match { source-address [ maggie_192.168.0.18 vancci_192.168.0.19 staff_192.168.0.164 Eddie_192.168.0.50 wilson_notebook_192.168.0.176 172_vivi Wilson_notebook_192.168.0.179 wilsonnotebook2_192.168.0.179 Zurine_192.168.0.191 staff_192.168.0.48/28 staff_192.168.0.16/28 staff_192.168.0.32/28 vivien_192.168.0.25 yee_192.168.0.23 bo_192.168.0.24 staff_192.168.0.55 192.168.0.170_vivi actwh-ip23 actwh-ip210 ]; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-taobao-fb; } } log { session-init; session-close; } } } policy ewf-gambling-game { match { source-address [ 192.168.0.20 Eddie_192.168.0.50 ]; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-gambling-game; } } } } policy ewf-ip21 { match { source-address staff_192.168.0.21; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-ip21; } } } } policy ewf-taobao { match { source-address [ yee_192.168.0.23 bo_192.168.0.24 staff_192.168.0.33 staff_192.168.0.37 Eddie_192.168.0.50 maggie_192.168.0.18 192.168.0.210 staff_192.168.0.55 actwh-ip23 actwh-ip210 ]; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-tabbao; } } log { session-init; session-close; } } } policy ewf-taobao-alipay { match { source-address staff_192.168.0.55; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-taobao-alipay; } } log { session-init; session-close; } } } policy ewf-ip26 { match { source-address staff_192.168.0.26; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster_ewf-ip26; } } } } policy ewf-ip31 { match { source-address staff_192.168.0.31; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-ip31; } } } } policy ewf-ip32 { match { source-address staff_192.168.0.32; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-ip32; } } } } policy ewf-ip34 { match { source-address staff_192.168.0.34; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-ip34; } } } } policy ewf-ip35 { match { source-address [ staff_192.168.0.35 staff_192.168.0.36 ]; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-ip35; } } } } policy ewf-facebook { match { source-address staff_192.168.0.55; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-facebook; } } } } policy ewf-grouponweb { match { source-address staff_192.168.0.181; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-grouponhkweb; } } } } policy static-user-to-all-web { match { source-address [ staff_192.168.0.48/28 staff_192.168.0.203 ]; destination-address any; application [ junos-http junos-https ]; } then { permit; log { session-init; session-close; } } } policy ewf-shop23 { match { source-address shop23_192.168.23.0/24; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-shop23; } } } } policy ewf-bock-all-sites { match { source-address lan_192.168.0.0/24; destination-address any; application [ junos-http junos-https ]; } then { permit { application-services { utm-policy aster-ewf-block-all-sites; } } log { session-init; session-close; } } } policy trust-to-untrust { match { source-address lan_192.168.0.0/24; destination-address any; application any; } then { permit; } } }
↧
Betreff: srx210 connect to IP camera auto disconnect after 3 mins
↧