Re: SIEM cannot received log when SRX using stream mode?
Hi Spuluka, Thanks for the url given. FYI, we have 3 SRX 5800 (Cluster , A, B , C) chassis cluster and one of them (Cluster A) is MacAfee can received the syslog may be because it have direct...
View ArticleRe: SIEM cannot received log when SRX using stream mode?
Can you arrange a packet capture at the SIEM or the connected port? That is really the way to verify which side this is on. Since you have the same configuration successfully pushing logs to the Space...
View ArticleRe: How to anchor a /32 route and advertise it to BGP peer
Would that affect the static NAT?
View ArticleRe: SRX 3600 MSS Drop
we are under an attack that sends syn packets with impressively high mtu , do you have an advice for that it creates so high traffic nearly 5Gbit
View ArticleRe: DHCP lease time not being respected
anyone trying to help? baffles me DHCP doesn't work well and not getting how Juniper gets so much respect making something that doesn't work well and for how long was this in use by so many people? but...
View ArticleRe: SIEM cannot received log when SRX using stream mode?
Hi, Yes this would need root privileges. Regards,Sahil Sharma---------------------------------------------------Please mark my solution as accepted if it helped, Kudos are appreciated as well.
View ArticleECMP with different weight
Dear All,Good Day,I try to configure ECMP With different weight which I have two lines one of them 12M and other is 8M So I need to divied bandwidth to 60% and 40% to make the best design...
View ArticleRe: SRX 3600 MSS Drop
For DoS attacks on the SRX you can use screen functions to detect and drop the malicious traffic....
View ArticleRe: ECMP with different weight
Hi, Here is an example of how to acheive this using policy-options in BGP :-http://www.juniper.net/techpubs/en_US/junos15.1/topics/example/bgp-multipath-unequal.html Please test if this works for you...
View ArticleRe: ECMP with different weight
You can weight for interface bandwidth using IS-IS or eBGP. But I'm not sure if this feature is active on the SRX series....
View ArticleRe: DHCP lease time not being respected
Hi Junipersrx240, Sorry to say, you are acting very ungrateful for the (free!) help several people have tried to give you where a lot of the issues you are facing are simply because you haven't taken...
View ArticleRe: SRX 3600 MSS Drop
srx does not have capability of good performance on syn attackshttp://forums.juniper.net/t5/SRX-Services-Gateway/SYN-Attack/td-p/301483
View ArticleRe: SRX 3600 MSS Drop
Hello,This is possible on MX with flexible offset filtershttps://www.juniper.net/documentation/en_US/junos15.1/topics/concept/firewall-filter-flexible-match-conditions-overview.htmlRequires JUNOS 14.2...
View ArticleRe: integration juniper with cisco
hi, with the jdhcp the same issuei dont know what happen
View ArticleConfigure Virtual Router on SRX
Hi everyone,I am new to Vitual Router in Junos. I have EX2200 and SRX220. Now its running in default router config - routing options & VPN IPsec... I having plan to create a VR for Operator to...
View ArticleRe: integration juniper with cisco
Try debug:set system services dhcp traceoptions file apple-credit-trace.logset system services dhcp traceoptions flag all>show log apple-credit-trace.log
View ArticleRe: Configure Virtual Router on SRX
Hello Ling NG, You can refer to the KB article below: https://kb.juniper.net/InfoCenter/index?page=content&id=KB16453&smlogin=true&actp=search Regards, Rushi
View ArticleRe: Configure Virtual Router on SRX
Thanks Rushi, I have confuse about user permissions. I want to create an operator user with access privileges that user only can config on VR like super-user but cant config on default router. is it...
View ArticleSRX 300 series JSB / JSE licence
When you buy an SRX300, is there a requirement to buy a JSB license? It seems to me that this is the base capability. I appreciate that the JSE license offers advance routing features such as MPLS.
View Article