Ask the Expert

  • 1.  ATP issues

    Posted 9 days ago
    Hello ,
    ia face a problem with the connection to ATP .
    when i run the diagnostic command there is an issue with the MTU .

    request services advanced-anti-malware srxapi.eu-west-1.sky.junipersecurity.net diagnostics detail

    [INFO] Try to get IP address for hostname srxapi.eu-west-1.sky.junipersecurity.net
    DNS check : [OK]
    [INFO] Try to test Juniper ATP server connectivity
    [INFO] Successfully connected to srxapi.eu-west-1.sky.junipersecurity.net:443
    [INFO] Successfully connected to ca.junipersecurity.net:8080
    [INFO] Successfully connected to va.junipersecurity.net:80
    Juniper ATP reachability check : [OK]
    [INFO] Time difference between ATP server and this device: 0 second(s)
    Time check : [OK]
    [INFO] Configuration checking passed: PKI
    [INFO] Configuration checking passed: SSL
    [INFO] Configuration checking passed: AAMW Connection
    [INFO] Configuration checking passed: SecIntel URL
    [INFO] Configuration checking passed: SecIntel Authentication
    Configuration activation check : [OK]
    [INFO] Try ICMP service in Juniper ATP
    Juniper ATP ICMP service check : [OK]
    [INFO] To-ATP connection is using pp0.2, according to route
    Interface configuration check : [OK]
    Outgoing interface MTU is default value
    [INFO] Check IP MTU with length 1472
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 864
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 560
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 408
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 332
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 294
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 275
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 265
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 260
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 258
    ping: sendto: Message too long
    [INFO] Check IP MTU with length 257
    ping: sendto: Message too long
    Warning: Outgoing interface MTU larger than path MTU
    IP Path MTU is 256
    SSL configuration consistent check : [OK]

    ------------------------------
    CHRIS BARAKOS
    ------------------------------