SRX Next-Gen Firewalls

This message was posted by a user wishing to remain anonymous That was it. Thank you!

Well, you already have policy from RemoteVPN to GSTVPN. But you're also using "dynamic-application any" there when you don't have application-identification service (AppID) enabled. If you're not using AppID, you should remove dynamic-application statements ...

This message was posted by a user wishing to remain anonymous 10.x.15.2/1-->10.x.1.1/9901;icmp,ipid-63136,st0.0,Dropped by POLICY:Denied by Policy default-policy-logical-system-00. This record shows up on the main side of the site to site. I know that ...

Hello Team, We are in the process of deploying the SRX firewall through Security Director and migrating all relevant configurations-including zones, policies, applications, services, interfaces, etc.-from the legacy Juniper firewall to the new Juniper ...

In that case, you can use show security packet-drop records to see if there's anything obvious about traffic from JSC to other side of the site-to-site is being dropped. Do on both sides of the site-to-site VPN. If nothing obvious is shown there, ...

This message was posted by a user wishing to remain anonymous On the other side of the site to site I have this static route 10.x.15.0/24 next-hop st0.1.

Despite the OID name, the jnxOperatingBuffer.9.1.0.0 is synonymous with memory memory utilization. At any rate, you seem to be looking for a command to just "free memory." Maybe there's some FreeBSD magic out there, but I doubt it. As mentioned in ...