Re: QoS Default Behavior
Thanks for the infor Alexander. So if I want EF traffic to go in to a queue, then I would need to have a firewall filter to classify it, correct? Thanks for the input and help!
View ArticleSecurity Director - policy sync
On Junos Space 14.1 I noticed an issue where if the policies are added locally on the SRX it not not synced back to Security Director. The way to get it back in sync is to import the configuration,...
View ArticleRe: Security Director - policy sync
Hello ! No , there is no way because even if in space you have set that the device is the owner of the config (NSOR) the SD does not sync automatically in order to prevent a mismatch, if 2 parties are...
View ArticleRe: Dual fabric links on SRX5800
Hi TDNY, The fab interface is itself a form of Link Aggregation ( if you do a > show interfaces terse | match fab you'll see that the interface type is of type aenet ); but it can only support two...
View ArticleClik here to view.
Re: QoS Default Behavior
No you can select a different classifier ( e.g the default classifier or a custopm made)but it can also be done via a firewall filter but you also need to change the scheduler for the expedited...
View ArticleRe: Dual fabric links on SRX5800
Hello Hisham, Thanks for the response. After reading the Juniper SRX series book by O'reilly online, you are correct it is (fab link) a form of a aggregated link. Yes you are corect is that I...
View ArticleRe: Dual fabric links on SRX5800
Yes, Good Work ! Congrats ! Now you have dual fabric redundant links working !
View ArticleRe: set up ipsec dynamic vpn
I think it may be issues with Windows 10 i am usingusually i can connect when using my mac but windows sometimes it work sometimes it does not
View ArticleClik here to view.
SRX 3K SYN proxy problem
Dear friends , we already setup syn & ack proxy but it does not worked , instead of the proxy it detect syn flood.
View ArticleRe: SRX 3K SYN proxy problem
Hello,I'd suggest You familiarize Yourself with difference between SYN-FLOOD protection and SYN-ACk-ACK proxy protection...
View ArticleRe: SRX 3K SYN proxy problem
No we just want to let the SYN Proxy work. It passes the spoof syn traffic. In the past we were using netscaler for syn proxy it was answering 100mbit syn traffic with 100mbit ack. SRX never do that...
View ArticleWhy i hate srx and will replace it with fortigate soon
I am getting tired and tired of my juniper srx240 first the web GUI is crap, i wish there is a word worse than crap i can use but i will not say more on that secondly i freaking hate the dynamic vpn...
View ArticleRe: SRX 3K SYN proxy problem
Hello, SPDNet wrote:No we just want to let the SYN Proxy work. It passes the spoof syn traffic. What are Your "screen tcp syn-flood" thresholds set to? Please post Your sanitized config. Also, I reckon...
View ArticleRe: Why i hate srx and will replace it with fortigate soon
good choose. we are using srx3600 with a full chasis and it is just a bull of sh..juniper knows the bugs , errors and they always request money for their mistakes and helps and also this is not a...
View ArticleClik here to view.
Re: SRX 3K SYN proxy problem
A few minutes ago we got a 50K pps spoof syn attack 185.118.142.254 620.41 kbps1638 pps16.98 mbps52975 pps And the device reached the maximum sessions and dropped all connection of firewall network...
View ArticleRe: Screen logs
Hi SPDNet, You never got back to us on this issue, did you manage to solve it ? Can you share your solution to it with us ?
View ArticleRe: Why i hate srx and will replace it with fortigate soon
Good pointsi thought i was the only one having that issuesometimes i think maybe it is my computer but after changing to pulse secure and same issue then i am just tired of it Fortigate is my top...
View ArticleRe: Screen logs
No could not solve it , juniper has been put a log icon there but it is not simply working it just opens an empty window, and your answers are not logical because you are telling about the syslog ,...
View ArticleRe: Screen logs
Hi SPDNet, "it just opens an empty window, and your answers are not logical because you are telling about the syslog , will it read syslog results from" No, it should save the logs locally on the SRX...
View ArticleClik here to view.
Re: Screen logs
* I only just noticed you're using a high-end SRX from the other thread .
View Article