SRX Next-Gen Firewalls

Hi Ben, yes i'm talking about Mitm so inside clients don't complain. I've used that link to configure most of it, but there's not much detail about loading a external CA for MITM use.

Do you mean an "official" cert signed by a CA? LetsEncrypt is handled directly in JunOS after like 22.4 IIRC. I have it set up for one client so Juniper Secure Connect is happy and works. But it's only valid for the SRX (because of the hostname) At ...

Hi all, Is it possible to use a public CA cert as my Root-CA in ssl proxy configuration so I do not have to add self-signed certs to all computers downstream of the SRX?

No. Not similar. We do eBGP towards our ISP. ------------------------------ Best regards Vidar Stokke ------------------------------

I believe the answer is "Yes," perhaps even "YES!!!" ------------------------------ Nikolay Semov ------------------------------

When I insert a new address-set into the global address book on the SRX340 device with version 24.2R1 through J-Web, it disappears after the commit command and is not visible in the J-Web interface. However, it is created and visible in the CLI interface. ...

Hey @ChrisLee . Thanks for getting back to me with an update. It's a very odd thing, because it's the same on the Cisco side, try a different piece of kit, and the link comes up, but put the 9200L back into the mix, and the problem comes back, maybe ...