SRX Next-Gen Firewalls

From you description the reverse static nat is not being correctly seen before the source nat general rule. This would be a bug if happening. A possible work around would be to add a statement to the source nat rule before the nat all to interface ...

root@gw1> show system processes extensive last pid: 43451; load averages: 1.97, 2.05, 2.10 up 0+05:52:02 17:41:23 507 threads: 7 running, 439 sleeping, 2 zombie, 59 waiting CPU: 58.4% user, 0.0% nice, 6.6% system, 1.4% interrupt, ...

I did upgrade the firmware but that did not fix the 100% CPU. Actually it's ipfeed that is choking the firewall 27930 root 100 0 812M 94M RUN 165:29 92.29% ipfd{ipfd} ------------------------------ JOHN HARRISON ---------- ...

I keep getting this error after I went back in with Jweb using chrome in my Mac OS. If I use Safari or other browser it works or if I use Incognito on Chrome it works otherwise once it logs in successfully I get Insufficient privileges You do not ...

This message was posted by a user wishing to remain anonymous I'm stuck on understanding why a set of static NAT entries appear to be taking effect for inbound traffic, but for outbound the traffic is instead being NATted using the egress interface. ...

Hi @opouwels , Noted. Thanks for feedback

PR1709386 , should be fixed in 21.4R3-S5 as well, I suppose easier upgrade then 22.3R3-S1, but we needed 22.1 for the other bugs PR1634881 fixed in 22.1R1 PR1626934 fixed in 22.1R1 PR1626390 fixed in 22.1R1 PR1693170 fixed in 22.1R3-S1 after POC testing ...