Hi,
There are 2 scenarios :-
Regards,
Sahil Sharma
---------------------------------------------------
Please mark my solution as accepted if it helped, Kudos are appreciated as well.
Thanks for the update and the MS link. Glad you have it working.
Nice. Mark your answer and resolved so others can quickly look and see remedial measues if they have similar issue.
Remarkable!!
Hi All,
Is there any one facing a problem with me when SIEM received log from SRX for syslog log and security log not in same time zone?
Is there any way we can change the time zone on security log flow same with time zone that configured in the SRX?
Thanks and appreciate someone help.
This document should be linked on all our Dynamic VPN pages as the explanation of how it functions helped me more than most of the official docs to get my service working on SRX300 running 15.1X49-D70.3. I've submitted a request to our documentation team for exactly that.
Thanks for the link!
Hi Experts,
Please help me in digging how to see the matched packet as i see dropped packet if i use basic-datapath.
BR//
Swati
which version are you running?
You may try "delete security flow traceoptions" commit and then do a rollback 1 nd commit
version is 12.1X44-D40.2.
I have already tried to delete the traceoption and then added again but still it is same.
can you share "show log 001_check| no-more" output? How did you confirm that you are only getting dropped packets?
The issue exists with the 'partition' option of 'request system software' executed on the release from which the upgrade is being performed. Upgrading from an affected release to a fixed release will not resolve this issue.
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10753
CVE
Hi All,
Just to update..after some troubleshooting with JTAC it's look like time zone between RE and FPC not same. The solution from JTAC is to reboot the box. Is someone has expreinced that can solve without reboot the box?
Thanks
SRX300 provided by Comcast/Xfinity their techs no nothing.
they can't tell me where to do port forwarding and if it's allowed by the customer.
and what is the unit flashed with that is different from factory?
also where do you see internet outages in the logs?
SRX300 provided by Comcast/Xfinity their techs no nothing.
they can't tell me where to do port forwarding and if it's allowed by the customer.
and what is the unit flashed with that is different from factory?
also where do you see internet outages in the logs?
Hi,
As Juniper documentation expain: the VLAN IDs 3968 through 4096 are reserved and cannot be configured. On SRX3xx and SRX5xx devices.
But how on D50 version I can configure that without any problem ? 
Did you commit the commit the configuration?
Take a look at these articles, they can help you do port forwarding (look specifically at the DNAT).
https://kb.juniper.net/library/CUSTOMERSERVICE/technotes/Junos_NAT_Examples.pdf
https://www.fir3net.com/Firewalls/Juniper/juniper-srx-destination-nat-port-forwarding.html
>show log messages
Specifically what would you want to find out about the internet outages?
Finally Juniper devices is getting some play! Too bad they techs are not being trained.
Can one implement dual static NATs?
I have a setup where we need to do source and destination natting for several hosts bi-directionally.
Thanks in advance,
Chris
try some debugging:
set security flow traceoptions file SFTPTRACE
set security flow traceoptions file size 2m <====modify file size as fit
set security flow traceoptions file files 10 <===set number of log files as fit
set security flow traceoptions flag basic-datapath
set security flow traceoptions flag packet-drops <===== flag all
set security flow traceoptions packet-filter F1 source-port <> <====could also add filter for source-address
set security flow traceoptions packet-filter F2 destination-port <> <====could also add filter for destination-address
You will learn which policy is causing the packet drops.
take a look at his article, it may also help explain
https://kb.juniper.net/InfoCenter/index?page=content&id=KB19444&actp=search
