Configure Security Prefixes

Learn how to configure local and global security prefixes.
A prefix is a group of one or more individual IP addresses or IP address subnets. Prefixes are a construct of stacked policies which help to identify traffic. With security policies, prefix filters restrict access within a branch and filter out traffic to specific IP addresses within the particular source and destination zones. As with application definitions, you can reuse prefix filters across the rules and policy sets you have created for security policy rules.
Prefixes can be either global or local in scope.
  • Global prefix filters use the same set of prefixes. By applying the global prefix filters defined for custom applications, leverage the security policy application definition.
  • Local prefixes are used when specific prefix values change by branch location. Use local prefixes to simplify creation and administration of rules. For example, a subset of IP addresses within a subnet. Use local prefixes to create a single policy across all sites to describe application behavior, eliminating the need to develop individual policies on a per-site basis.
  • Configure global security prefixes.
    1. Select
      Policies
      Stacked Policies
      Security
      Security Prefixes
      .
    2. Select
      Global
      , and then click
      Create Global Prefix
      .
    3. On the
      Add Global Prefix
      screen, enter a name and description for the prefix.
    4. Enter an IP and subnet address.
      IP addresses within a prefix are defined by the subnet. For example, 10.1.1.0/24 defines the entire limit of 255 IP addresses in that subnet.
    5. Select
      NGFWSECURITY
      in the
      Create for policy Type(s)
      section to create the prefix for security policies.
      (Optional)
      You can create a copy of this prefix filter to be used in Path, QoS, and NAT policies respectively by selecting the respective check boxes.
  • Configure local security prefixes.
    1. Select
      Policies
      Stacked Policies
      Security
      Security Prefixes
      .
    2. Select
      Local
      , and then click
      Create Local Prefix
      .
    3. On the
      Create Local Prefix
      screen, enter a name and description for the prefix.
    4. Select
      NGFWSECURITY
      in the
      Create for policy Type(s)
      section to create the prefix for security policies.
      (Optional)
      You can create a copy of this prefix filter to be used in Path, QoS, and NAT policies respectively by selecting the respective check boxes.
      You must attach a local prefix to a site for the prefix to work.

Recommended For You