Juniper

JunOS M/MX

Remove Access
Verifier
Decommission Network Object
Impact Analysis
Verifier
Authorization and documentation
Rule Recertification
Update metadata

JunOS SRX

Access Requests
Manual target selection
Device object selection
Modify Group
Designer
Syntax-based change
Provisioning
Provisioning in automatic step
Create/modify group
Add Access
Risk Analysis
Designer
Verifier
Syntax-based change instructions
Provisioning
Provisioning in automatic step
Authorization and documentation
Auto close
Remove Access
Verifier
Decommission Network Object
Impact Analysis
Designer
Provisioning
Verifier
Authorization and documentation
Rule Decommission
Designer
Provisioning
Provisioning in automatic step
Verifier
Authorization and documentation
Auto close
Rule Modification
Device object selection (object browser)
Provisioning
Syntax-based commands
Rule Recertification
Update metadata

Notes for JunOS SRX

  • In a Rule Modification workflow there is no zone validation for Juniper SRX devices. While it is possible for a request to include adding objects from address books or adding zones to rules on other zones, validation will fail on provisioning.

  • Rule Modification supports provisioning in auto-step.

  • Modify Group is only supported if the device is configured with a Global Address Book.

  • Designer gives priority to service objects that have a default timeout set in the firewall.

NetScreen

Access Requests
Manual target selection
Device object selection
Modify Group
Create/modify group
Add Access
Risk Analysis
Designer
Verifier
Syntax-based change instructions
Authorization and documentation
Auto close
Remove Access
Verifier
Decommission Network Object
Impact Analysis
Verifier
Rule Recertification
Update metadata