SRX Next-Gen Firewalls

 View Only
last person joined: 4 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

Welcome!

If you have a question or a use case, likely there are others who are experiencing or worked through the same thing. Don't hesitate to jump in and ask or share your knowledge!

Need additional guidance?  Check out these Juniper Resources.

Juniper Threat LabsSRX Upgrade Guide Security Advisories Technical Bulletins

Latest Discussion Posts

  • Profile Picture

    RE: Using a Public CA Cert for SSL Forward Proxy

    By: RoutingFrames , 10 minutes ago

    Hmm, okay so the only way to do this is with a self-signed cert, and then upload it to each computer? I just want to confirm.

  • Profile Picture

    RE: Using a Public CA Cert for SSL Forward Proxy

    By: Nikolay Semov , an hour ago

    You're essentially looking for your SRX to act as a publicly-trusted sub-CA, with ability to issue a certificate for any website. Unless you're operating at the scale of a nation state, I don't believe you're likely to be able to get the necessary certificate ...

  • Profile Picture

    RE: Using a Public CA Cert for SSL Forward Proxy

    By: RoutingFrames , 15 hours ago

    Hi Ben, yes i'm talking about Mitm so inside clients don't complain. I've used that link to configure most of it, but there's not much detail about loading a external CA for MITM use.

  • Profile Picture

    RE: Using a Public CA Cert for SSL Forward Proxy

    By: bkamen , 15 hours ago

    Do you mean an "official" cert signed by a CA? LetsEncrypt is handled directly in JunOS after like 22.4 IIRC. I have it set up for one client so Juniper Secure Connect is happy and works. But it's only valid for the SRX (because of the hostname) At ...

  • Profile Picture

    Using a Public CA Cert for SSL Forward Proxy

    By: RoutingFrames , 20 hours ago

    Hi all, Is it possible to use a public CA cert as my Root-CA in ssl proxy configuration so I do not have to add self-signed certs to all computers downstream of the SRX?

  • Profile Picture

    RE: SRX "sync-icmp-session"

    By: vidar.stokke , yesterday

    No. Not similar. We do eBGP towards our ISP. ------------------------------ Best regards Vidar Stokke ------------------------------

  • Profile Picture

    RE: Disappearing global address-set

    By: Nikolay Semov , 4 days ago

    I believe the answer is "Yes," perhaps even "YES!!!" ------------------------------ Nikolay Semov ------------------------------

Announcements

  • Introducing Juniper Support Portal (JSP) Mobile App for iOS

    The Juniper Support Portal (JSP) Mobile App is now available for customer use on iOS platforms. The app is designed to provide mobile access for on-the-go service support. 

    What’s available?

    • Live Chat Support
    • Instant Notifications
    • Knowledge Base Access 

Unanswered Posts

  • Juniper Secure Connect with Windows built-in VPN c ...

  • MSCHAPv2 instead of PAP in phase 1 RADIUS authenti ...

  • SRX & EVPN VPWS faisability

  • Log format for Juniper SRX Series IDP

  • HTTPS/TLS traffic inspection on SRX1500 configured ...

  • Proxy chain capability of SRX1500s configued in cluster ...

  • Security Logging not working?

Top Contributors in the Community