Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 562 / 1016

You can merge any two security policies. To access the Policy Merge tool, select the
Policies , then use the menu bar to select Tools > Policy Merge . See the NSM Online Help
for details.
NOTE: You can merge rules from 5.0 and later devices that use the deny action into
rules from 5.1 and later devices that use the reject action, provided that the source,
destination, source, and service are the same for the rules.
Policy A contains the rules as shown in Figure 84 on page 512.
Figure 84: Security Policy A Rules (Before Policy Merge)
Policy B contains the rules as shown in Figure 85 on page 512.
Figure 85: Security Policy B Rules (Before Policy Merge)
To merge Policy A (from policy) with Policy B (to policy), from the file menu, select Tools
> Policy Merge Tool and configure the merge.
NSM copies all rules from Policy A and pastes them above the rules in Policy B. Next,
NSM merges the matching values in the columns to create a single, simplified policy
(Policy C), shown in Figure 86 on page 512.
Figure 86: Security Policy Rules (Merged from Policy A and Policy B)
Copyright © 2010, Juniper Networks, Inc. 512
Network and Security Manager Administration Guide