On the SSG the zone selection for firewall policy match is based on the routing table. So the policy untrust to trust is selected because the route to the destination address is to an interface in your trust zone and not your DMZ zone.
↧
Channel:
All SRX Services Gateway posts
X
Are you the publisher?
Claim or
contact us
about this channel.
X
0
Channel Details:
- Title: All SRX Services Gateway posts
- Channel Number: 58594161
- Language: English
- Registered On: January 24, 2016, 4:05 am
- Number of Articles: 17645
- Latest Snapshot: November 7, 2020, 3:11 am
- RSS URL: http://forums.juniper.net/jnet/rss/boardmessages?board.id=srx
- Publisher: https://forums.juniper.net/t5/SRX-Services-Gateway/bd-p/srx
- Description: All SRX Services Gateway posts
- Catalog: //gateway2683.rssing.com/catalog.php?indx=58594161
© 2025 //www.rssing.com