SRX Next-Gen Firewalls

Hello James, Despites the fact that fb35523 is pointing some interesting information, let me try to answer directly to your question. As I tested in my lab , an old SRX110 in version 12.1 stop beeing synchronised after about one hour if I kill it's ...

I'll roll this back to 22, apply the config change, and try upgrade with no-validate. ------------------------------ ALEX H ------------------------------

Do you have a spare SRX you can upgrade to 23 with no-validate as a test? This maybe just a validation bug... ------------------------------ Nikolay Semov ------------------------------

I think there's an unfortunate clue in the app details for junos:MSRPC: Alias List: junos:MSRPC-UNKNOWN So, it seems, unlike the O365 example in the article, MSRPC is not really an all-encompassing AppID definition ... On the bright side, if ...

I don't have a KB for it but I once tried to get a totally isolated network to sync time internally. The Juniper EX4200 switches couldn't be persuaded to act as NTP servers unless they has a server to sync to but I had a number of Adva FSP3000R7 chassis ...

SRX340 I have only a couple of traffic policies configured to log, using "log session-init" or "log session-close". I have traffic-log configured as: set system syslog file traffic-log user info set system syslog file traffic-log match RT_FLOW_SESSION ...

Does the Juniper SRX still provide time to NTP clients when it has lost synchronization with its own NTP server? Or does the SRX simply stop sending NTP to clients all-together? I believe it simply stops when it has lost its own NTP server, but ...