Allow IP Protocols

Hi Guys,

a Customer wants to allow IP Protocol 97 through his SRX.

So I created an application like this:

set applications application ip97 protocol 97

The Rule looks like this:

from-zone Zone1 to-zone Zone2 {

            policy Anchor_Controler {

                match {

                    source-address Controller1;

                    destination-address [ Controller2 Controller3 ];

                    application ip97;

                }

                then {

                    permit;

                         }

However the Customer reports, that this is not working.

Since I have never had to allow a Protocol by Number - before i search myself crazy on the SRX - is this correct and the error is elsewhere or do I need more Parameters?

Regards

Chris