For ipsec vpn with the remote site on a dynamic ip address you will need to use aggressive mode and host id instead of gateway ip address. The kb outlining the SRX side configuration for that is here in the knowledge base. You will need to find the similar configuration that matches from UniFi. ...

Yes, they can do IPsec between each other. The "DreamMachine" is more of a NightmareMachine in my eyes, but when one of those failed to connect to a Palo, the SRX succeeded. In that particular case, the DreamMachine was replaced with a spare and then it all worked. They are notoriously unstable though, ...

The procedure all depends on what redundancy your connected devices have. If they are mainly hypervisors and other devices that are multihomed, this can be done quite nicely. The more single-attached devices you have, the longer the downtime. I guess you have already read this guide: https://www.juniper.net/documentation/us/en/software/nce/nce-171-qfx-vc-upgade/topics/topic-map/nce-171-qfx-vc-upgrade.html ...

As mentioned, the SRX300/320 will do just fine (and, yes, the rack mount kit for the SRX300 is separate). You should really look into the AutoVPN feature where you can simplify the config of the central SRX to a minimum and still offer 100% security. Basically, you define one IKE/IPsec setting in the ...

Change the Juniper MTU to 1514 https://irfansalam.wordpress.com/2013/12/19/mtu-difference-between-cisco-and-juniper/

Has anyone seen hits for the SMB:LNX-KRNL-SESN-STP-DOS signature from Attack database version:3637(Thu Sep 28 13:59:35 2023 UTC)? ------------------------------ Michael ------------------------------

We have a situation where client would like to have VPN Connection from the office network ( for testing ) using the same SRX box configured for external VPN (from outside network like home/ cellular). Regular VPN is working fine when connected using home networks or cellular. Split tunnel is configured ...