We have a Juniper SSG 5 running Screen OS 6.2.0r9.0 at appears to be dropping packets. When downloading files (in a browser or FTP client like filezilla) sometimes they will just “hang” half way through, and the only way to fix it is to pause and resume the download. When I tried to our external IP from inside our network I found that I was getting some packet loss. I telented into the SSG and ran:
ssg5-serial-> ping Target IPv4 address:OurExternalIP Repeat count :10000 Datagram size : Timeout in seconds: Source interface:bgroup0 Type escape sequence to abort Sending 10000, 100-byte ICMP Echos to OurExternalIP, timeout is 1 seconds from bgroup0 !!!!!!!!!!!
!!!!!!!!!! Success Rate is 99 percent (9993/10000), round-trip time min/avg/max=2/3/214 ms
(external IP is in Untrust and bgroup0 is in Trust) I thought this might be an issue with load or a hardware thing. I grabbed our cold spare and tried the same thing in a test environment with no load on the SSG, the same thing happened. I did a factory reset and just setup the addresses on each interface and ran the same again with no policies or settings and still lost ~10 packets. Can the SSG5 just not handle the load from Trust to Untrust and back? Or is it throttling not just my icmp requests, but on the production one http and ftp downloads? All my previous experience has been with Cisco kit so any advice would be greatly appreciated. I did find this Light packet loss through router but it dosnt quite answer my question.