<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Never mind, answered my own question. Didn’t realize you have to define the policy first and let it be added to the bottom of the list, and then use the insert statement to move it.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>James S. Smith </span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>Network Architect<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>WIND Mobile </span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>207 Queen's Quay West, Suite 710<b> </b>Toronto, ON M5J 1A7<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>Email: </span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>JSmith@WindMobile.ca<b><o:p></o:p></b></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>Direct:</span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'> 416-640-9792<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>Fax: </span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>416-987-1203 <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'><o:p> </o:p></span></b></p><p class=MsoNormal style='text-autospace:none'><a href="http://www.windmobile.ca/"><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D;text-decoration:none'><img border=0 width=122 height=16 id="Picture_x0020_5" src="cid:image001.png@01CC4569.14140240"></span></a><a href="http://www.facebook.com/WINDmobile"><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D;text-decoration:none'><img border=0 width=140 height=16 id="Picture_x0020_6" src="cid:image002.png@01CC4569.14140240"></span></a><a href="http://www.twitter.com/WINDmobile"><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D;text-decoration:none'><img border=0 width=139 height=16 id="Picture_x0020_7" src="cid:image003.png@01CC4569.14140240"></span></a><span lang=EN-CA style='font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D;mso-fareast-language:EN-CA'><o:p></o:p></span></p></div><p class=MsoNormal><a href="http://www.windmobile.ca/"><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:#1F497D;text-decoration:none'><img border=0 width=140 height=82 id="Picture_x0020_8" src="cid:image004.png@01CC4569.14140240"></span></a><span style='color:#1F497D'><o:p></o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> James S. Smith <br><b>Sent:</b> Monday, July 18, 2011 4:07 PM<br><b>To:</b> juniper-nsp@puck.nether.net<br><b>Subject:</b> Inserting security policies on SRX<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I have an SRX240 running 11.1R2.3, and occasionally I have to add new policies. The obvious choice would seem to be use the insert command but I’m getting some weird errors. For example, I have a number of policies for the different protocols going between the IT staff and the untrust zone. When trying to insert a new policy the SRX complains the policy does not exist.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>jsmith@fw01# insert security policies from-zone it_staff to-zone untrust policy it_staff-untrust-windows-rdp before policy it_staff-untrust-default<o:p></o:p></p><p class=MsoNormal>error: statement 'it_staff-untrust-windows-rdp' not found<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>James S. Smith </span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>Network Architect<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>WIND Mobile </span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>207 Queen's Quay West, Suite 710<b> </b>Toronto, ON M5J 1A7<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>Email: </span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>JSmith@WindMobile.ca<b><o:p></o:p></b></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>Direct:</span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'> 416-640-9792<o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'><o:p> </o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>Fax: </span></b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'>416-987-1203 <o:p></o:p></span></p><p class=MsoNormal style='text-autospace:none'><b><span style='font-size:10.0pt;color:#0F243E;mso-fareast-language:EN-CA'><o:p> </o:p></span></b></p><p class=MsoNormal style='text-autospace:none'><a href="http://www.windmobile.ca/"><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><img border=0 width=122 height=16 id="Picture_x0020_1" src="cid:image001.png@01CC4569.14140240" alt="Description: cid:image001.png@01CC4564.9C2EA310"></span></a><a href="http://www.facebook.com/WINDmobile"><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><img border=0 width=140 height=16 id="Picture_x0020_2" src="cid:image002.png@01CC4569.14140240" alt="Description: cid:image002.png@01CC4564.9C2EA310"></span></a><a href="http://www.twitter.com/WINDmobile"><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><img border=0 width=139 height=16 id="Picture_x0020_3" src="cid:image003.png@01CC4569.14140240" alt="Description: cid:image003.png@01CC4564.9C2EA310"></span></a><span lang=EN-CA style='font-size:12.0pt;font-family:"Times New Roman","serif";mso-fareast-language:EN-CA'><o:p></o:p></span></p><p class=MsoNormal><a href="http://www.windmobile.ca/"><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><img border=0 width=140 height=82 id="Picture_x0020_4" src="cid:image004.png@01CC4569.14140240" alt="Description: cid:image004.png@01CC4564.9C2EA310"></span></a><o:p></o:p></p></div></body></html>