security application firewall name <name> rule <rule-number> protocol <protocol>
Specifies match by application protocol for a firewall application rule.
- name
- The name of a firewall rule set.
- rule-number
- The numeric identifier of a rule. The identifier ranges from 1 through 9999.
- protocol
- Matches packets by protocol. A protocol is the name of an application that runs directly over UDP or TCP. You can configure a single protocol name to be matched from a list of DPI engine applications at the most granular level.
Configuration mode
security {
application {
firewall {
name name {
rule rule-number {
protocol protocol
}
}
}
}
}
You can specify a protocol match for a firewall rule in this command, or specify a match by application name using the security application firewall name <name> rule <rule-number> name <app-name> command. Use a protocol rule if you want to match any applications that use that protocol, and use an application rule if you want to match only a specific named application.
Use the set form of this command to specify match by application protocol for a firewall application rule.
Use the delete form of this command to delete match by application protocol for a firewall application rule.
Use the show form of this command to display application protocol match for a firewall application rule.