How do I enable/disable a specific security policy rule via the CLI on USG FLEX series devices?

Zyxel_Luna

The following example uses the USG FLEX 100 model.

To enable or disable an existing security policy rule on a USG FLEX device via the CLI, use the following commands to enter the security policy sub-command mode and apply the changes:

1. usgflex100 > show secure-policy
   1. (Optional) Check existing rule numbers
2. usgflex100 >configure terminal
   1. Enter configuration mode.
3. usgflex100 > secure-policy <rule_number>
   1. Enter secure policy sub-command mode for the specified <rule_number>
4. usgflex100 > activate
   1. Activate to this existing rule. If you want to disable this rule, enter no activate.
5. usgflex100 > exit
6. usgflex100 > write
   1. Remember to exit the secure-policy mode and enter “write” to save the changes.

References and Official Documentation

USG FLEX 100 CLI Reference Guide:
https://download.zyxel.com/USG_FLEX_100/cli_reference_guide/USG FLEX 100_V4.10–5.42Ed1.pdf

• Page 218: Security policy commands
• Page 221: Security policy sub-commands
• Page 224: Configuration examples

Other Models:Download the corresponding CLI reference guide from the official Zyxel website: https://www.zyxel.com/global/en/products/firewall-ngfw

Note: This article describes how to enable or disable an individual security policy rule (e.g., secure-policy rule 8). If you want to enable or disable the entire Security Policy feature module via the CLI rather than a specific rule, please refer to:

How to use CLI to enable and disable security policy?