0
votes
1answer
49 views

netscreen sn25 vs cisco asa5505 speed

Current i have 2 server direct connect to 1 juniper netscreen sn25 firewall then go to internet, the intel 350 nic is setup at 100mbps (which should be able go up to 1000mbps). the problem is this ...
0
votes
0answers
295 views

Juniper MX SSH filtering for IRB interfaces not included in examples?

I am trying to filter SSH, BGP, and OSPD on my Juniper MX routers (allowing only certain IP addresses to initiate connections). I expanded on an example from ...
1
vote
1answer
1k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
1
vote
1answer
214 views

Juniper Firewall SRX210 questions

Total newbie to Juniper. Okay, I've been messing with the web interface on a SRX210 Firewall for a few hours now and looking like I need specific help now. So the overall architecture is that I have ...
1
vote
0answers
431 views

juniper ssg320 intrazone configration issues Close - AGE OUT

We have one main office and another small office that holds only 5 people. We have recently setup OpenVPN on our main office and created a bridged vpn between our main office LAN and a windows 2003 ...
1
vote
0answers
272 views

Allowing connections initiated from outside

I've got an old Juniper SSG5 running ScreenOS 5.4.0r6.0. Once a day, more or less, it'll start randomly dropping packets at a rate of ~5-10%. We currently solve this issue by simply rebooting the ...
-1
votes
1answer
135 views

Firewall Deep Inspection Updates and Antivirus Subscription, worth it? [closed]

I realize that this is a subjective question, but I'm trying to get some experiences We have Juniper firewalls in our organization (SSG-320M, SSG-5, and some old NS-5GT). We have the option of a ...
0
votes
1answer
841 views

Juniper SSG20 IP settings for email server

We have 5 usable external static IP addresses leased by our ISP: .49 to .53, where .49 is assigned to the Juniper SSG20 firewall and NATed for 172.16.10.0/24 .50 is assigned to a windows box for ...
0
votes
2answers
175 views

How to restict telnet from Juniper firewall?

Can telnet everywhere from the appliance without any traffic / event logs. It seems to disregard the global policy we have set for blocking all traffic unless specifically permitted.
2
votes
1answer
902 views

Juniper SRX210, How can i enable the port 554, 9001 for 192.168.1.151 local IP?

I have been strugling to solve this but still i can not fix it. I have 192.168.1.151 PC and it has 554 and 9001 TCP/UDP open. But i need to publicly access that. In my juniper srx210 i have this ...
1
vote
2answers
452 views

Connection timed out after plenty of new TCP connections through Juniper firewall

I have the following scenario: Two Windows Server 2008 are communicating in a client/server fassion with a Juniper ISG 1000 (6.3.0r6) in between. The client is creating around 100 new tcp connections ...
0
votes
0answers
937 views

Juniper SSG5 Dropping packets

We have a Juniper SSG 5 running Screen OS 6.2.0r9.0 at appears to be dropping packets. When downloading files (in a browser or FTP client like filezilla) sometimes they will just “hang” half way ...
0
votes
1answer
504 views

Juniper ScreenOS Windows 7 Vpn client

I'd like to configure my Juniper firewall so users can VPN from the windows built in client. Can anyone provide me with that information on how to go about configuring this? (I'm somewhat new to ...
6
votes
2answers
531 views

Gigabit network with a 100 megabit firewall

We have set up all the equipment necessary to have a gigabit network. All servers + workstations are running gigabit cards, just bought a 16 port switch that can handle gigabit as well. My concern is ...
0
votes
0answers
820 views

Juniper ssg 5 web UI not working

I am facing issue with my Juniper SSG 5. I tried to configure & enable web filtering in my office following various ways to do it on the web. Even with various permutations it is still not ...
0
votes
1answer
537 views

What policy should can I set to allow my incoming Exchange mail to to get to my Exchange Server?

I have a juniper ssg 5 as my firewall These are a couple of things I have tried: I used the wizard to create route based vpn I've tried creating multiple policies based on the different services ...
0
votes
3answers
1k views

Multiple IPs on Juniper SRX100 Untrust Port

I am having trouble getting multiple IP addresses on the untrust port. I have tried a few different methods, but can't seem to get it to work. Does anyone have a good tutorial that is not easily found ...
1
vote
3answers
149 views

Why should I use Firewall Zones and not just Address Objects?

I appreciate Firewall Address Objects and Address Groups - they simplify management by letting me give a name to a group of addresses. But I don't understand what Firewall Zones (LAN, WAN, DMZ, etc.) ...
10
votes
9answers
2k views

Why buy high end hardware firewalls?

There exist firewalls from Juniper and Cisco that cost more than a house. So I wonder: what does one get from a $10.000+ firewall compared to an 2U server with 4x 10Gbit network cards running e.g. ...
3
votes
1answer
2k views

How to route all traffic over site to site VPN tunnel?

I have a site to site VPN configured between our main site (Site A) and a remote site (Site B). Site A is 10.60.0.0/16 Site B is 192.168.99.0/24 The firewall in Site B is a Juniper SSG running ...
1
vote
1answer
882 views

What is the default management state on Netscreen firewall interfaces?

in other words, is the command: unset interface ethernet1/1 ip manageable redundant? I was thinking that for security purposes, it would probably make sense for Netscreens to only enable management ...
1
vote
4answers
4k views

Export firewall rules on Juniper SSG-550

I'd like to export all the policies set up in my Juniper SSG-550 running JunOS 5.1 but i can't find any way to do so. Preferably in an easy to parse format (csv would be great). Problem is the ...
2
votes
2answers
3k views

How do you implement NAT-T passthrough on a Juniper SRX series Firewall?

We have 3 juniper SRX-100 firewalls, they are configured like so: FW1 -> FW2 -> INTERNET -> FW3 We would like to create an IPSEC tunnel between FW3 and FW1 passing through FW2 preferably using ...
1
vote
6answers
10k views

Can't get into Juniper Networks Netscreen Web interface

Have a Netscreen that appears to be functioning correctly (it's in production and has been for several years), but yet is not allowing me into the Web interface on port 80 or 443 (also tried 8080). ...
1
vote
2answers
1k views

Juniper firewall - large pings for testing

Is there an way to permit ping packets larger than 1472 through a Juniper SSG520M firewall? "Ping of Death" and "Large Size ICMP Packet" protection has already been disabled under the 'Screening' ...
2
votes
5answers
5k views

How do I keep a Juniper ScreenOS interface IP up when no one is plugged into it?

I have a VPN connection to a remote site and whenever nothing is plugged into the remote sites LAN bgroup the interface IP isn't managable or pingable. Anyone know what command I skipped on CLI for ...