Juniper

JunOS M/MX

Remove Access: Verifier
Decommission Network Object: Impact Analysis; Verifier; Authorization and documentation
Rule Recertification: Update metadata

Access Requests: Manual target selection; Device object selection
Modify Group: Designer; Syntax-based change; Provisioning; Provisioning in automatic step; Create/modify group
Add Access: Risk Analysis; Designer; Verifier; Syntax-based change instructions; Provisioning; Provisioning in automatic step; Authorization and documentation; Auto close
Remove Access: Verifier
Decommission Network Object: Impact Analysis; Designer; Provisioning; Verifier; Authorization and documentation
Rule Decommission: Designer; Provisioning; Provisioning in automatic step; Verifier; Authorization and documentation; Auto close
Rule Modification: Device object selection (object browser); Provisioning; Syntax-based commands
Rule Recertification: Update metadata

In a Rule Modification workflow there is no zone validation for Juniper SRX devices. While it is possible for a request to include adding objects from address books or adding zones to rules on other zones, validation will fail on provisioning.
Rule Modification supports provisioning in auto-step.
Modify Group is only supported if the device is configured with a Global Address Book.
Designer gives priority to service objects that have a default timeout set in the firewall.

Access Requests: Manual target selection; Device object selection
Modify Group: Create/modify group
Add Access: Risk Analysis; Designer; Verifier; Syntax-based change instructions; Authorization and documentation; Auto close
Remove Access: Verifier
Decommission Network Object: Impact Analysis; Verifier
Rule Recertification: Update metadata

Access Requests: Manual target selection; Device object selection
Modify Group: Create/modify group
Add Access: Risk Analysis; Verifier; Authorization and documentation; Auto close
Remove Access: Verifier
Decommission Network Object: Impact Analysis; Verifier
Rule Recertification: Update metadata