Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

address-set - Rule Drops

$
0
0

Hello, 

 

Currently Runnig Junos Space (Latest Version) to manage a few SRX3600 

 

We have a strange issue with rule drops. Basically at random points in the day we loose address from address-set. meaning the policy is not hit and source address hits the default deny. 

 

when checking the config the address is missing from the address-set , if i do a republish from space or commit on the device the address comes back into the group

 

Doesnt show in the roll back as been added or removed 

 

We have 4 Logical Systems each with a global address book, there is no overall global address book as we only use the logical systems 

 

before commit 

address-set group_TEST-www-incoming {
address host_1.1.1.1
address test.com
address helpdesk.test.org;
address primary.test.org;
address css.test.org;
address host_x.x.x.x

 

after commit 

address-set group_TEST-www-incoming {
address host_1.1.1.1
address test.com
address helpdesk.test.org;
address primary.test.org;
address www.test.org;
address css.test.org;
address host_x.x.x.x

 

any one else seen this issue ?


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>