Re: SRX 3K SYN proxy problem

Hello,

---

SPDNet wrote:

No we just want to let the SYN Proxy work. It passes the spoof syn traffic. 

---

What are Your "screen tcp syn-flood" thresholds set to? Please post Your sanitized config.

Also, I reckon the You did not set "destination-threshold" and it may be useful in Your case.

https://www.juniper.net/techpubs/en_US/junos15.1x49/topics/example/denial-of-service-network-syn-flood-protection-for-web-server-in-dmz-enabling-cli.html

HTH

Thx

Alex