Special functions via policy - name field

[HeikoAnkenbrand]

In the past, one of our customers, for example, used the prefix “fast_rule_” in the name field of a firewall policy. This caused the connection to be accelerated directly on the hyperscaler.

At the moment, I am looking for all such prefixes in policy names that trigger special functions.

>>> Are there any others?

Example:

Currently, I know of the following:

Name	Description of the function
fast_rule_	Maestro Administration Guide - MHO Fast Forward
PBR_	Firewall rule matching in PBR - sk167135

[the_rock]

Wow Heiko, thats super interesting find...I did not even know something like could happen. Did you ever verify with TAC?

Andy

[HeikoAnkenbrand]

The two functions mentioned above do exist.

Ten years ago, with R7x, there was also an extension that forwarded L3/L4 traffic directly on the switch via API. Unfortunately, I’ve forgotten the abbreviation and can’t find the SK anymore.

However, the two parameters mentioned above have been around for quite a while, which is why I didn’t check with TAC again.

[the_rock]

Learn something new every day...honestly, had no idea.

Andy

[PhoneBoy]

I knew about PBR_ but did not know about fast_rule_.
Not familiar with others.

[HeikoAnkenbrand]

The question is whether there are more.

I once managed layer 4 switches from a certain manufacturer via the policy name field under R7x as well. They were able to set local access lists and accelerate Layer 4 connections directly on the switch.

But for the life of me, I can’t remember the name or the SK anymore.