Internet service groups in policies

This feature provides support for Internet Service Groups in traffic shaping and firewall policies. Service groups can be used as the source and destination of the policy. Internet Service Groups are used as criteria to match traffic; the shaper will be applied when the traffic matches.

To use a group as a destination, internet-service must be enabled. To use a group as a source, internet-service-src must be enabled.

The following CLI variables are available in the firewall policy and firewall shaping-policy commands:

Variable

Description

internet-service-group <string>

Internet Service group name.

internet-service-custom-group <string>

Custom Internet Service group name.

internet-service-src-group <string>

Internet Service source group name.

internet-service-src-custom-group <string>

Custom Internet Service source group name.

Examples