SRX Next-Gen Firewalls

First of all try to delete dynamic-application any in your policy from intern to trust. Because if you have both type of policies in your srx - unified (its standart policies with dynamic-application) and standart, unified policies will not worked. And ...

If you positive its the firewall dropping your traffic, run this command: show security match-policy from-zone [you source zone] to-zone [your destination zone] source-ip [your source ip] destination-ip [your dest ip] source-port 12345 destination-port ...

We have a strange problem with a policy rule that is not matching on our SRX340 (software version 20.2R3-S2.5). We have several zones, and traffic from zone intern to zone trust is denied somehow. Despite there existing a rule that explicitly allows ...

Thanks Puluka, appreciate it ------------------------------ SUDQI AL-IMAM ------------------------------

Hi Marcel. Thanks by reponse. I will deploy it this way and follow feedback results. ------------------------------ Guilherme Rigueti ------------------------------