An Application Set in Juniper SRX is a custom-defined group of applications that can be referenced in security policies. This allows administrators to simplify policy definitions by grouping multiple applications under a single logical entity.
Application Sets are particularly useful when a security rule needs to apply to a collection of related applications (e.g., web-based apps, VoIP services, or commonly used ports).
To create an Application Set in SRX, follow the steps below
Define individual applications (if not already defined):
set applications application APP_HTTP protocol tcp destination-port 80
set applications application APP_HTTPS protocol tcp destination-port 443
Create the application set:
set applications application-set WEB_APPS application APP_HTTP
set applications application-set WEB_APPS application APP_HTTPS
set security policies from-zone trust to-zone untrust policy allow-web traffic match source-address any
set security policies from-zone trust to-zone untrust policy allow-web traffic match destination-address any
set security policies from-zone trust to-zone untrust policy allow-web traffic match application WEB_APPS
set security policies from-zone trust to-zone untrust policy allow-web traffic then permit