Policer default action in firewall filter

[ovod88_]

Hi)) I have a question.

if I have the config:

filter limit-ftp {
policer policer-1 {
if-exceeding {
bandwidth-limit 400k;
burst-size-limit 100k;
}
then discard;
}
term ftp {
from {
source-address {
10.2.3/24;
}

protocol tcp;
destination-port [ftp ftp-data];
}
then {
policer policer-1

What will be with traffic that does noe exceed the policer profile? Will it be dropped or accepted?

[seabiscuit_]

It will be accepted

[ovod88_]

But why? Because of default implicit accept action for policy action modifiers?

[kalagesan_]

Hi,

Please post you query regarding the firewall policies either in SRX firewall or netscreen screen OS firewall forum. This forum is for UAC/OAC/SBR ?MAG IC  products

http://forums.juniper.net/t5/SRX-Services-Gateway/bd-p/srx

http://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/bd-p/Firewalls

Regards,
Kannan