SRX Next-Gen Firewalls

I subscribe to SkyATP services for my SRX and am not sure I am using it to it's full protection. I need help setting up an SSL Proxy because most web traffic is SSL. I noticed so many request in my DNS server for rigi.com from Brazil and Paraguay. ...

Yea - i don't know why you kept the "dynamic-applications any;" If you note from the config snippet I recommended trying, I had deleted that from your previous config. Glad it's working. Cheers, -Ben p.s. if you can, go back to original post ...

from -zone untrust to -zone trust { policy server -access { match { source -address any ; destination -address port -83 ; dynamic-application any; } then { ...

I checked the new logs too and it seems the same for me. Can you specify what you saw different ? can you try below config: delete security nat destination rule-set rs1 from from zone untrust set security nat destination rule-set rs1 from ...

Sorry, I am not sure what you mean. But right now I checked the logs again and found some other things: ------------------------------ GEORGI DONKOV ------------------------------

Looks like the device is not identifying the Dnat and hence its dropping packet. Sep 26 12:24:31 12:24:31.270481:CID-0:RT:check self-traffic on ge-0/0/0.0, in_tunnel 0x0 dp 83 Sep 26 12:24:31 12:24:31.270481:CID-0:RT:pak_for_self: No handler function ...

Hello, Brijil. Here you are the traces. Thank you in advance! ------------------------------ GEORGI DONKOV ------------------------------