Installed a license for security features on both nodes of SRX cluster. Able to configure application-identification but application-firewall does not show up as expected.
When trying to add it to a policy:
srx@root# set then permit application-services ?
Possible completions:
advanced-anti-malware-policy Specify advanced-anti-malware policy name
> application-traffic-control Application traffic control services
+ apply-groups Groups from which to inherit configuration data
+ apply-groups-except Don't inherit configuration data from these groups
Cannot see application-firewall as an option.
Starting in Junos OS release 18.2R1, you can use unified policies to avail the same functionality of an AppFW configuration. Unified policies leverage the application identity information from the application identification (AppID) service to permit, deny, reject, or redirect the traffic. A unified policy configuration handles all application firewall functionality and simplifies the task of configuring a firewall policy.
Read one of the following topic for configuring AppFW:
To see these unified policies please use this hierarchy:
set security policies from zone X to zone Y policy XY match dynamic-application <dynamic app name>
There you would be able to see the unified policies.