SRX Next-Gen Firewalls

Forgive the noob question, it's been many years since my CCNA courses. We just got a /24 ip block. Our ISPs are able to provide us BGP and the smallest network they will advertise is a /24. As a start we created a DMZ interface and assigned the ...

Hey guys, I currently have an SRX345 active/passive chassis cluster. The node 0 is an SRX345-SYS-JB-2AC and the node 1 is an SRX345-SYS-JB. I will be replacing the node 1 with the 2AC model. I was looking over the [SRX] RMA replacement of a node in ...

All addresses for policies are created in the Configure ->Shared Objects -> Addresses section and then referenced in the policies created in each of the zones. One exception is when setting up NAT addresses. The NAT pools are under Configure->NAT Policy->Pools. ...

This message was posted by a user wishing to remain anonymous That was it. Thank you!

Well, you already have policy from RemoteVPN to GSTVPN. But you're also using "dynamic-application any" there when you don't have application-identification service (AppID) enabled. If you're not using AppID, you should remove dynamic-application statements ...

This message was posted by a user wishing to remain anonymous 10.x.15.2/1-->10.x.1.1/9901;icmp,ipid-63136,st0.0,Dropped by POLICY:Denied by Policy default-policy-logical-system-00. This record shows up on the main side of the site to site. I know that ...

Hello Team, We are in the process of deploying the SRX firewall through Security Director and migrating all relevant configurations-including zones, policies, applications, services, interfaces, etc.-from the legacy Juniper firewall to the new Juniper ...