Policy Command - Watchguard V10 Command Line Interface Manual

Effect
Arguments
Example

policy command

WG#config<ENTER>
WG(config)#policy
policy <"name"> [<source> <destination> <interface num>]
[-position <num>]
[-firewall <pass|block|authenticate|reject>]
[<-service|-tenant|-nat|-qos|-schedule|-ipsec [no]
[bi_directional]> <]
[<-tosF|-tosR> <bbbbbb>] # b is <0|1>;msb from left.
[-log_per_policy [enable|disable] ]
[-icmp_error_handling_per_policy [[global | all] |
[-mss_adjustment_per_policy [auto|limit_to <num>|disable|
use_global]]
Effect
Arguments
WatchGuard Command Line Interface Guide
Top-level configuration mode commands
Disables the high availability feature.
None
WG#config<ENTER>
WG(config)#no high_availability
[[no] fragmentation_required]
[[no] time_exceeded]
[[no] network_unreachable]
[[no] host_unreachable]
[[no] port_unreachable] ] ]
Allows you to create a new security policy or revise
an existing policy, pending your selection of traffic
specifications and actions. Note: you should have
already created the needed address groups,
schedules, actions and services before creating this
new policy.
<source> <destination>
These two arguments record the source and
57