Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

What do the policy attributes mean when viewing the policy list (get policy)?



Article ID: KB14837 KB Last Updated: 24 Jul 2009Version: 1.0
When viewing the policy list in the command line interface using a 'get policy' command, certain attributes of policies are abbreviated and displayed under the heading "ASTLCB".

What do each of these abbreviations mean in this heading?

Here is sample output from a 'get policy' command:

nsisg1000-> get policy
Total regular policies 1, Default deny, Software based policy search, new policy enabled.
   ID From      To       Src-address  Dst-address  Service              Action State   ASTLCB
    1 Trust     Untrust  Any-IPv4     Any-IPv4     FTP                  Permit hidden  ---X-X

What do each of the abbreviations mean in the ASTLCB heading?

A- Deep Inspection attack objects.
S- Policy scheduling.
T- Traffic shaping.
L- Logging.
C- Counting.
B- HA session backup.

If, under the column, "-" is displayed, this means this feature is disabled for this policy.  If an "X" is displayed, it means this feature is enabled for this policy.  In the example here, logging and HA session backup are enabled for this policy.

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search