SRX Next-Gen Firewalls

Hi Nikolay, Noted. Thanks for your feedback. Look like i need to propose Fortinet due to that feature.

No, I don't think so ... :-( You can do dynamic routing or maybe even AppQoE (https://www.juniper.net/documentation/us/en/software/junos/application-identification/topics/topic-map/security-appqoe.html), but it's not as clean and simple as aggregate ...

Hi all, May i know whether the SRX have feature to aggregate/bundle the IPSEC VPN tunnel same like fortiget in URL below? If can appreciate if someone can share the url that i can refer. Thanks and appreciate someone help. https://docs.fort ...

BGP over ------------------------------ Tag Te ------------------------------

Yes that's right, I use that set up at a number of sites. Make sure that the management interfaces aren't in the same subnet as any of the data interfaces to be sure of no problems. ------------------------------ CHARLES RAYER -------------------- ...

If I understand correctly, You mean it would be ok to put a static route on the management routing instance that points to the interface where the syslog server lives? Sounds like that could solve my problem. These are production machines.. ------------------------------ ...

Hi Charles, I have these in the mgmt-junos routing instance. Tried 'log mode stream' - no result. Meanwhile, I configured some tests from my office location to see if syslog server able to receive, and yes, it is. ... ------------------------------ ...