SRX Next-Gen Firewalls

correct DNS is now supported in the latest code versions, however, it only works for ipv4 only ; if you need ipv6 ( I'm using ipv6 ike with dynamic "hostname" vpn to avoid opening the VPN hub to the world as I can lock down the VPN DNS name) so ...

I'm with Steve on this one. It's nice to issue a single command and just sit back and let it do its thing, upgrading a whole stack. It seems that the validation whether a cluster can perform the operation are insufficient, so if your cluster isn't in ...

ISSU has been a mixed experience for me from the beginning in 2009. When it works the process is great but the failures tend to be much worse than scheduled outages. A few years back we made the decision to do scheduled outages with reboots instead ...

Hello people, Be honest. What's your thoughts on ISSU process from your experience? Is it solid and works pretty well? Recently we've seen several problems with it: intermittent accesses, some sessions were lost between the switchover process and ...

Your policies are mostly permissive. If a website is allowed when it seems it should be blocked, you should check how the website is categorized in order to see if your policy is working ok or not. See this article on how to check a website category: ...

Thanks for the reply! web-filtering { http-reassemble; http-persist; juniper-enhanced { server { host rp.cloud.threatseeker.com; port 80; } profile BLOCKALLpolicy { category ...

If the cable tests good and replacement does not fix this the next step is a reboot. and if that does not work there is likely a hardware issue. See this kb https://supportportal.juniper.net/s/article/Multiple-Link-DownFlap-with-Incrementing-Errors-on-sag91bna103?language=en_US ...