1.查看安全策略
>show? security policies
順序就是按照顯示出來的順序，與Index無關，從上到下匹配
2. 調整防火墻策略
#insert security policies from-zone CAMERAS to-zone INTERNET policy CAMERAS-to-NTP before policy CAMERAS-to-INTERNET
3.查看防火墻策略匹配情況
>show security policies hit-count?查看所有策略歷史命中數
4.查看當前會話?
>show security flow session
5.Flow的Debug
set security flow traceoptions file flowlog #生成文件名flowlog
set security flow traceoptions flag basic-datapath
set security flow traceoptions packet-filter to0 source-prefix 192.168.1.61/32
set security flow traceoptions packet-filter to0 destination-prefix 192.168.0.12/32
#上面2條是設置一個packet-filter把從源192.168.1.61到目標192.168.0.12的流量Debug信息記入floglog文件
SRX> show log filelog #查看filelog文件內容
SRX> clear log filelog #清除filelog文件內容
)
