SRX

 View Only

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



Expand all | Collapse all

Configured Cisco Umbrella on the Juniper

This thread has been viewed 0 times
  • 1.  Configured Cisco Umbrella on the Juniper

    Posted 10-14-2020 12:43
    Greetings friends, has anyone configured Cisco Umbrella on the Juniper SRX 345, SRX 240?

    #ciscoumbrella


  • 2.  Re: Configured Cisco Umbrella on the Juniper

    Posted 10-15-2020 01:09

    I have never personally used Cisco Umbrella, but should be able to so via the dns-proxy feature. There the SRX acts as a local resolver with a set of predefined forwarders. These forwarders can just be the Cisco Umbrella servers.

     

    Example below where the SRX listens on irb.10 and forwards all requests to 1.0.0.1+1.1.1.1.

     

    Note: System name-server should also be set to the correct ones.

    user@srx# show system services dns dns-proxy
    interface {
        irb.10;
    }
    view internal {
        match-clients 10.0.0.0/8;
        domain * {
            forwarders {
                1.1.1.1;
                1.0.0.1;
            }
        }
    }