SRX

Expand all | Collapse all

SSL PROXY SRX 320

Jump to Best Answer
  • 1.  SSL PROXY SRX 320

    Posted 11-27-2017 05:17

    Hello. I have a problem. I don't have command "services ssl proxy". 
    fluoro@r80-02# show services ssl
    ##
    ## Warning: configuration block ignored: unsupported platform (srx320-poe)
    ##
    proxy {
    profile SSL_INSPECT_PROFILE {
    root-ca ssl-inspect-ca;
    }
    }

    I try configure ssl initiation profile SSL_INITIATION_PROF_1 , but there is not "trusted-ca" command and i don't see command in the security policy.
    fluoro@r80-02# set security policies from-zone trust to-zone INTERNET policy MGP_SRV01-TO-INTERNET_TEST_PROXY then permit application-services ?
    Possible completions:
    advanced-anti-malware-policy 
    > application-firewall Application firewall services
    > application-traffic-control 
    + apply-groups 
    + apply-groups-except 
    gprs-gtp-profile 
    gprs-sctp-profile 
    idp 
    redirect-wx 
    reverse-redirect-wx 
    security-intelligence-policy 
    > uac-policy 
    utm-policy 

     

    How can i configure SSL PROXY on my SRX? Thanks...

     

     



  • 2.  RE: SSL PROXY SRX 320
    Best Answer

     
    Posted 11-27-2017 07:25
    SSL proxy is not supported on SRX320.

    Ref: https://www.juniper.net/documentation/en_US/junos/topics/concept/ssl-proxy-overview.html

    SSL is supported on the SRX340, SRX345, SRX550M, SRX1500, SRX4100, SRX4200, SRX5400, SRX5600, and the SRX5800 devices.