Hi to all, I have a customer who has an SRX345 box. Sometimes the device get frezzed an becomes inaccesible via icmp, web, etc... The device doesn't answer to any traffic via any interface and the customer becomes incomunicated. The only way to recover the device is reboot it. This...
Hi, please suggest me which way is the best to achieve what I need as I kinda lost in the variants. It's probably a trivial question so the reply is probably just a link to the right article on topic. I have the SRX 3xx as a gateway device. Hoster provides it with two Internet...
Hello, Is it possible to send remote syslog messages with TLS encryption to a remote syslog server like rsyslog? Does anyone have any configuration examples for this, so far I have only been able to find example where the SRX is collecting the logs. #syslog #TLS #encrypted ...
Hello, I have been setting up advpn as part of a deployment using ecdsa-signatures-256. Root CA and Local Certificate are successfully loaded onto the box. Using the documentation: https://www.juniper.net/documentation/en US/junos/topics/topic-map/security-auto-discovery-vpns...
Hello, I'm not able to see logs in my J-web even though I configured event mode and a file, I'm seeing the image I attached it the J-Web and below is my configuration root@SRX-1# show security log ( mode event; ) root# show system syslog archive size 100k...
Good day all, I am new to the forum. I am in a bit of problem with our internet connections with 2 providers, as i have recently joined and do not quite understand the configurations. we use juniper srx series, below is the configuration with details ( (note, i have used dummy ip's, asn...
Hello Baldwizard, Greetings! As per the description, I understand that the Secondary node is not online: Can you help us with the below outputs: > show chassis alarms no-forwarding > show chassis cluster status > show chassis cluster statistics >...
Hello HDawood, Greetings! Please refer to the below links for the comparison of all the Juniper SRX models. You will also get the detailed explanation of different attributes like performance, services supported, Junos release, Availability, Hardware guide and many other ...
This is incorrect. wildcard-address accepts a dotted decimal mask, not a subnet mask (cidr or otherwise). 10.10.10.2/24 expands to 10.10.10.2/0.0.0.24. Wildcard masks are used for address matching: https://www.imedita.com/blog/wildcard-masks/ security-zone test ( address-book ...