Re: Proxy IDs (traffic Selector) of 0.0.0.0
Hi, There are 2 scenarios :- VPN tunnel is initiated from the remote end - The SRX would accept the proxy IDs and tunnel would be formed.SRX initiates the VPN tunnel - The tunnel establishment would...
View ArticleRe: SRX IDP Policy - No counters
Nice. Mark your answer and resolved so others can quickly look and see remedial measues if they have similar issue.
View ArticleSecurity log flow time zone not same with syslog time zone in SRX58000?
Hi All, Is there any one facing a problem with me when SIEM received log from SRX for syslog log and security log not in same time zone? Is there any way we can change the time zone on security log...
View ArticleRe: Asking about Preshared-key on VPN Remote Access
This document should be linked on all our Dynamic VPN pages as the explanation of how it functions helped me more than most of the official docs to get my service working on SRX300 running...
View ArticleRe: SFTP to External Server Issues - Network error: Software caused...
This didn't work for me , worked via ssg , srx swap out and unable to get any response to initial connection ? Connection to server timesout ? I can connect to the server using same version of...
View ArticleRe: traceoptions only showing dropped packets inspite of applying...
Hi Experts, Please help me in digging how to see the matched packet as i see dropped packet if i use basic-datapath. BR//Swati
View ArticleRe: traceoptions only showing dropped packets inspite of applying...
which version are you running? You may try "delete security flow traceoptions" commit and then do a rollback 1 nd commit
View ArticleRe: traceoptions only showing dropped packets inspite of applying...
version is 12.1X44-D40.2.I have already tried to delete the traceoption and then added again but still it is same.
View ArticleRe: traceoptions only showing dropped packets inspite of applying...
can you share "show log 001_check| no-more" output? How did you confirm that you are only getting dropped packets?
View ArticleCVE-2016-1278 Upgrades using 'partition' option may allow unauthenticated...
The issue exists with the 'partition' option of 'request system software' executed on the release from which the upgrade is being performed. Upgrading from an affected release to a fixed release will...
View ArticleRe: Security log flow time zone not same with syslog time zone in SRX58000?
Hi All, Just to update..after some troubleshooting with JTAC it's look like time zone between RE and FPC not same. The solution from JTAC is to reboot the box. Is someone has expreinced that can solve...
View ArticleSRX300 provided by comcast/xfinity their techs no nothing
SRX300 provided by Comcast/Xfinity their techs no nothing. they can't tell me where to do port forwarding and if it's allowed by the customer. and what is the unit flashed with that is different from...
View ArticleSRX300 provided by comcast/xfinity their techs know nothing
SRX300 provided by Comcast/Xfinity their techs no nothing. they can't tell me where to do port forwarding and if it's allowed by the customer. and what is the unit flashed with that is different from...
View ArticleSRX3xx - High VLAN ID No.
Hi, As Juniper documentation expain: the VLAN IDs 3968 through 4096 are reserved and cannot be configured. On SRX3xx and SRX5xx devices.But how on D50 version I can configure that without any problem ?
View ArticleRe: SRX300 provided by comcast/xfinity their techs know nothing
Take a look at these articles, they can help you do port forwarding (look specifically at the...
View ArticleDual Static NAT?
Can one implement dual static NATs? I have a setup where we need to do source and destination natting for several hosts bi-directionally. Thanks in advance,Chris
View ArticleRe: SFTP to External Server Issues - Network error: Software caused...
try some debugging:set security flow traceoptions file SFTPTRACEset security flow traceoptions file size 2m <====modify file size as fitset security flow traceoptions file files 10 <===set number...
View Article