Subscriber Services: Parameterized filters for protocol-independent packets

You can use family any for parameterized firewall filters in dynamic service profiles. You can also specify a precedence order for family any filters when they are attached to a dynamic logical interface. Parameterization enables you to create basic or boilerplate filters under a dynamic profile and have specific values for certain attributes provided only when the dynamic session is activated.