Security

Hi,

I have a Juniper Secure Connect (JSC) configuration that works fine on several SRX3xx series devices, but the same configuration does not work on an SRX1600.

JSC client version: 23.4
SRX1600 Junos: 23.4R1.9
Tunnel establishes successfully

Problem: On the JSC client, TX traffic increases but RX traffic remains 0. Can't ping anything.

Client statistics:
Data (TX): ~216 KB
Data (RX): 0 bytes

Has anyone experienced this issue on SRX1600, or is there a known difference in JSC support between SRX3xx and SRX1600 platforms?

Hi Goran,

There are some differences between the Branch and Mid-Range SRXs when it comes to IPSEC VPN configurations. 
Can you please confirm if the SRX is showing the IPSEC/IKE tunnel associations as being established in both directions? Do you see bi-directional traffic flows on the SRX?
If you are using Extended Sequence Numbering?
Also, make sure to configure an explicit IKE authentication-algorithm under the IKE proposal.

There are many variations and factors that can impact IPSEC tunnels (e.g. i haven't even mentioned the client (firewalls) yet) but this should give you a good starting point to troubleshoot issues.

Kind regards,

Gavin White