Route Tagged
Hello On my SSG320, the ospf protocol is configured to pushlish on my other equipments (Cisco routers) all the routes. Until now, we don't use tag. But we need now to tag the route. Is it possible to...
View ArticleSSG5 problem after firmware update 6.3.0r24.0 (Firewall+VPN)
After applying a firmware update 6.3.0r24.0 (Firewall+VPN) device boots normally and creates a VPN to another site. everything appears to work. After 5 minutes I cannot connect to any IPs thru the...
View ArticleSSG 350 support LACP?
Hello, I have SSG 350M with Firewall 6.3.x. I would like to know is it support LACP ? If yes, any resource is available online for details setup? Thanks!
View ArticleHow to do current step to unset interface
Hello, Could you please advise what can I do the correct steps to unset interface by CLI. I think firstly it require to unset the static route and snmp. But after that I am no idea what should...
View ArticleSSG-140 PBR reverse web proxy failover?
We currently use an SSG-140 firewall in front of our servers and I am interested in setting up a reverse web proxy. I know I can do that using policy based routing and directing the traffic to a proxy...
View Articlecommand to check whether session already reach the througput on ISG2000?
Hi all, May i know what command that we can use to see whether the firewall session already reach the limit on ISG2000. For example the current ISG2000 always reboot due due to reach the maximum...
View ArticleInvalid subnet
I noticed that ScreenOS would take an invalid subnet on address object like "set address 'Trust' 'subnet' 192.168.10.0 255.255.0.0" Does the firewall match on 192.168.0.0/16?
View ArticleSSG 140 Without access
Hi, i have a problem with our SSG140 . After restart the system, i can´t any access to the ssg 140.Neither console or gui web. The power LED are on and all green LED from LAN port´sWhat can i do?...
View ArticleSet Public IP address for Tunnel
I have an SSG5 which connects direct to the Internet using PPoE. So it has a static Public IP on the untrusted interface. A VPN tunnel from the LAN connects to a data center in Japan. This has been...
View ArticleSSG5 and DELL-Switch
Hello, we have 2 SSG5 in a HA-Cluster and want to change from some old Netgear-Switches to DELL-Switch (S4820T). When I connect one of the SSG to the Switch I get no connect. Do I have to configure the...
View ArticleAnnoying “Multiple login failures” Alarm
Hoping someone can help. We've got a few SSG20 firewalls and I've got one that has an annoying alarm “Multiple login failures” Alarm that clutters up the CLI. I used to have the hidden command to...
View ArticleTrust to DMZ on SSG5 ScreenOS 6.3 help
Hi,after Googling half a day and not finding a solution, I'm sorry to post my question here, hoping for a solution.I have a SSG5 with ScreenOS 6.3.Setup isPrivate network on 192.168.10.x/24 in bgroup0...
View Article4byte (32bits) BGP AS on SSG5 (6.3.0r24)
Hi All, Due to peering network changes I need to change the AS number from 16 to 32bits.However, even with the latest ScreenOS this seems not possible.In the virtual router I can only select up until...
View ArticleHelp with a security policy issue
Hi all - hoping for a little bit of peer advice here: i have an SSG 550M 'hub' fw which tunnels out to several remote internet based juniper fw's. We create tunnels between them and route the traffic...
View Articleunable to add read-only user
Hi all,My client is still using an old Netscreen 50 running 5.4 r24. Since we manage this device, we have agreed with the them that only we will have root access and that they can have read-only...
View ArticleIs it ISG2000 support mix mode setup?
Hi All, Kindly need some clarification whether the ISG2000 (cluster) support the Mix mode(L3/L2) setup. When look the KB it conflict between this kb. KB4263 said support mix mode but KB27831 said not...
View ArticleSSG5 - Package dropping
We have a SSG5 as a perimeter firewall to the Internet... recently we started experiencing problems where we would loose packages to the Internet, all of a sudden, without any apparent reason, making...
View ArticleHaving a problem SSG5 with polycom HDX6000
Hi all, I have configured SSG5 for VC polycom HDX6000.I can call to some the remote side (I can see and hear any thing from them).But for the only one remote side I cannot see and hear from them.at the...
View ArticleMIP to private address problem on SSG5
Hi all,I am having a problem about connection from private IP address to internet with SSG5.My configuration on SSG5 is that I have a private IP address (10.192.10.100) in trust zone. Then I set one...
View ArticleSSG 5 - get VIP to look for route in Untrust-vr
Hi I am having a problem to get VIP to work. I have a DMZ zone in Untrust-vr.I want to be able to configure a VIP on Untrust and send the traffic to the DMZ zone. I can't get it to work. It just keeps...
View Article