SRX Next-Gen Firewalls

Hi James, It sounds like you have done the right thing... You have added the policy to allow traffic from-zone to the same zone. Would you mind sharing just the interface configuration and the security policy you have configured? (You can change ...

Hey Mate, The SRX650 is a bit of a difficult one. I'm not sure that the USB works as the documentation only refers to a compact flash card and USB operations do not work. Have you tried the " request system snapshot media usb" command? The 'external' ...

Hello Koos147, Yes, you can NAT traffic going into and coming from ipsec tunnel. If the tunnel between 3rd party and main office is working , is it also using st0.249 ? It will be strange if it works for other traffic but says tunnel not found for ...

Hello TheDisciple, the zones names contains company names. so number 1 is lost in translation :) my bad. For point 2, the route from main office to 3th party is working fine for devices on main office. are you sure that it is possible to use nat ...

Hello Koos147, It looks like there are 2 fold issues : The Source NAT did not occur because from-zone in Source NAT is written as "external-location" whereas flow trace shows that incoming st0 interface lies in warehouse-vpn . Therefore, it does ...

Thanks for pointing to the right direction. for what i understand the traffic never get translated. and therefore never matching the traffic selectors of the 3th party vpn. Sep 22 13:55:49 fwsrx320 clear-log[71004]: logfile cleared Sep 22 13:56:06 ...

The web article here: https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US Says ...