topic Re: Special functions via policy - name field in General Topics

Special functions via policy - name field

HeikoAnkenbrand — Wed, 24 Sep 2025 12:56:35 GMT

In the past, one of our customers, for example, used the prefix “fast_rule_” in the name field of a firewall policy. This caused the connection to be accelerated directly on the hyperscaler.

At the moment, I am looking for all such prefixes in policy names that trigger special functions.

>>> Are there any others?

Example:

Currently, I know of the following:

Name	Description of the function
fast_rule_	Maestro Administration Guide - MHO Fast Forward
PBR_	Firewall rule matching in PBR - sk167135

Re: Special functions via policy - name field

the_rock — Thu, 25 Sep 2025 00:29:32 GMT

Wow Heiko, thats super interesting find...I did not even know something like could happen. Did you ever verify with TAC?

Andy

Re: Special functions via policy - name field

HeikoAnkenbrand — Thu, 25 Sep 2025 07:18:49 GMT

The two functions mentioned above do exist.

Ten years ago, with R7x, there was also an extension that forwarded L3/L4 traffic directly on the switch via API. Unfortunately, I’ve forgotten the abbreviation and can’t find the SK anymore.

However, the two parameters mentioned above have been around for quite a while, which is why I didn’t check with TAC again.

Re: Special functions via policy - name field

the_rock — Thu, 25 Sep 2025 10:41:30 GMT

Learn something new every day...honestly, had no idea.

Andy

Re: Special functions via policy - name field

PhoneBoy — Thu, 25 Sep 2025 19:05:56 GMT

I knew about PBR_ but did not know about fast_rule_.
Not familiar with others.

Re: Special functions via policy - name field

HeikoAnkenbrand — Fri, 26 Sep 2025 20:49:23 GMT

The question is whether there are more.

I once managed layer 4 switches from a certain manufacturer via the policy name field under R7x as well. They were able to set local access lists and accelerate Layer 4 connections directly on the switch.

But for the life of me, I can’t remember the name or the SK anymore.