Fatal error in Jweb for SRX
Hi Guys, Can you anyone help us to resolve the below error, We are getting this error while logging into jweb. Even we are not getting login page also. "Fatal error : Allowed Memory size of 20971520...
View ArticleSRX100 GRE tunnel for P2P leased line
Ready to have another new P2P between HQ and a remote office. The remote office using SRX100. HQ using SSG140 (ScreenOS).An existing P2P between HQ (SSG140 ScreenOS) and data center (SSG140 ScreenOS)...
View ArticleLogging DHCP bindings
I'm trying to log DHCP bindings (IP -> MAC mapping). I do NOT mean displaying the current bindings with show dhcp [...]. I mean sending log messages to a syslog server. To quote Juniper:This was...
View ArticleSky ATP/SRX security log AAMW_ACTION_LOG verdict-number = -1 meaning
We are using Sky ATP with our SRX 340 and I was curious about why a machine ended up on the Infected Hosts list. It was a false positive but when i look at the security logs generated by the SRX, I see...
View Articlelicences SRX 220 to SRX 300
hi there, i want remove licences to SRX 220 and install them these licences over a SRX300 new.currently have 2 licences is this possible change licences tto another device License usage: Licenses...
View ArticleL2 CoS on ex-4200 switch
HI Guys, I am relatively new to Juniper CoS and spent most of the day reading deployment guides... Though seem to be looping around multifield/BA dscp and ieee-802.1p... Here is what i am trying to...
View ArticleSRX-210 NAT issue
I have a SRX210 that i had an issue with slow webpages and other stuff. I tried reboot, commit full, noting worked. I happened to remove the NAT statment commit and put it back and commit and...
View ArticleCan someone confirm whether Juniper IPS has signature for Monero Mining Malware?
Hi all, I'm try to search whether the juniper IPS signature have signature for blocking Monero Mining Malware but not found....
View ArticleClik here to view.
2 ISP NAT via VPN
HelloI would like to make our webserver accessible when Internet is down on ISP1. I want to create second NAT to my webserver, which is connected to FW1, from fW2 which is connected via VPN to FW1....
View ArticleClik here to view.
Migrating from Palo Alto to SRX
I'm planning to migrate the core firewall services form Palo Alto to SRX. Is there a document about that migration from PA to SRX? Or a tool that can help with the process? Seems like PA to SRX is not...
View ArticleIPS on the core SRX
Hi, Is it good practice to enable IPS on the core SRX to inspect internal traffic?Please mention bad impacts to normal traffic.On the edge SRX IPS is enabled. Thanks
View ArticleClik here to view.
Tftp traffic for IPphone
Hi I have a problem about TFTP traffic which is passed on firewall. SIP server ---------------- FW ----------------- IPphone My IPphone will be assigned an IP address from Firewall. First step is...
View ArticleIP Sec site-to-site VPN Poor performance
Hello, I have IP Sec site-to-site VPN between SRX 340. One is in US and another is in India. We have 100M line in India but when we transfer file to US from LAN to LAN it gives on 40-50 Kb/s speed....
View Articlejunos equivilant to screenos VIP port redirection
junos equivilant to screenos VIP port redirection I'm not very familiar with Juniper; I’m trying to replicate a VIP config from ScreenOS device with a Junos srx 340 unit. but, still not working. Would...
View ArticleSRX 340 - Clustering
Hi, I need help in configuring chassis cluster on a SRX340 device. Would be greatly appreciated if someone can suggest. Currently, a SRX340 is running in a production environment. Now I need to add...
View ArticleSRX to SRX VPN with self signed certificates
Hi,I’m looking to create a VPN between 2 SRX devices. I want to use self signed certificates to authenticate the VPN. Does anyone know the procedure for this?
View ArticleReviewing LTE MP Card in SRX
Dear Team ;I have tested LTE Card on SRX320 as a POC on banking CST ,below are results : 1-You can insert two Sim to the two slots on card , But only one Sim (with only one profile) be active at...
View ArticleClik here to view.
Migration from PIX firewall to SRX ?
Dear Geeks do you have any migration tool ( conversion ) from Cisco PIX firewalls to SRX . i found script tool coded by perl I( name : px2sx258 ) do you have any idea how to use it or another tool...
View ArticleClik here to view.
SRX240 random ip addresses can't get out to the Internet
I have an interesting one for you guys. This is my home setup. Comcast Modem ----> SRX240H2 cluster ------> EX4200 VC -------> DHCP clientsI have random IP addresses lossing access to the...
View ArticleDynamic Traffic Shaping
Is it possible to dynamically allocate bandwidth from a 100Mb circuit, where ge-0/0/1 gets a maximum of 20 and ge-0/0/2 gets a minimum of 80, but then whatever isn't utilized on ge-0/0/1 gets...
View Article