nat incoming source with MIP (ScreenOS)
Our network 192.168.10.0/24 (netA). Partner network 192.168.1.0/24 (attach topology). 192.168.10.10 (serverA) is our server. We have some partners have same remote LAN: 192.168.1.0/24 (netB). Iam...
View ArticleScreenOS VSYS session count via SNMP
Hi I'm trying to monitor the number of active sessions through the firewall which is fine using nsResSessAllocate for physical gateways but strugging to find a way to do it on a per-VSYS level?
View ArticleClik here to view.
Does not load OS
I have a juniper ssg-550m that has all the led in red minus the power led.At all times the led remains, I do not recognize the console cable. Can somebody help me?
View ArticleStrange Latency Issue Netscreen 50
Hi, We're having a bit of a strange issue with latency and can't figure out why. We have two Juniper Netscreen 50's running in HA mode at the gateway of our network. Every Wednesday the latency shoots...
View ArticleSite to Site VPN -SSG5 to Sonicwall
Hello all, Having trouble with my VPN between a Sonicwall and a Juniper SSG5. I have the tunnel up but it is got one-way traffic. Followed the steps outlinned on the KB and not having much luck. Here's...
View ArticleInvalid subnet
I noticed that ScreenOS would take an invalid subnet on address object like "set address 'Trust' 'subnet' 192.168.10.0 255.255.0.0" Does the firewall match on 192.168.0.0/16?
View ArticleSSG 140 Without access
Hi, i have a problem with our SSG140 . After restart the system, i can´t any access to the ssg 140.Neither console or gui web. The power LED are on and all green LED from LAN port´sWhat can i do?...
View ArticleSet Public IP address for Tunnel
I have an SSG5 which connects direct to the Internet using PPoE. So it has a static Public IP on the untrusted interface. A VPN tunnel from the LAN connects to a data center in Japan. This has been...
View ArticleSSG5 and DELL-Switch
Hello, we have 2 SSG5 in a HA-Cluster and want to change from some old Netgear-Switches to DELL-Switch (S4820T). When I connect one of the SSG to the Switch I get no connect. Do I have to configure the...
View ArticleAnnoying “Multiple login failures” Alarm
Hoping someone can help. We've got a few SSG20 firewalls and I've got one that has an annoying alarm “Multiple login failures” Alarm that clutters up the CLI. I used to have the hidden command to...
View ArticleTrust to DMZ on SSG5 ScreenOS 6.3 help
Hi,after Googling half a day and not finding a solution, I'm sorry to post my question here, hoping for a solution.I have a SSG5 with ScreenOS 6.3.Setup isPrivate network on 192.168.10.x/24 in bgroup0...
View Article4byte (32bits) BGP AS on SSG5 (6.3.0r24)
Hi All, Due to peering network changes I need to change the AS number from 16 to 32bits.However, even with the latest ScreenOS this seems not possible.In the virtual router I can only select up until...
View ArticleClik here to view.
Help with a security policy issue
Hi all - hoping for a little bit of peer advice here: i have an SSG 550M 'hub' fw which tunnels out to several remote internet based juniper fw's. We create tunnels between them and route the traffic...
View Articleunable to add read-only user
Hi all,My client is still using an old Netscreen 50 running 5.4 r24. Since we manage this device, we have agreed with the them that only we will have root access and that they can have read-only...
View ArticleIs it ISG2000 support mix mode setup?
Hi All, Kindly need some clarification whether the ISG2000 (cluster) support the Mix mode(L3/L2) setup. When look the KB it conflict between this kb. KB4263 said support mix mode but KB27831 said not...
View ArticleSSG5 - Package dropping
We have a SSG5 as a perimeter firewall to the Internet... recently we started experiencing problems where we would loose packages to the Internet, all of a sudden, without any apparent reason, making...
View ArticleHaving a problem SSG5 with polycom HDX6000
Hi all, I have configured SSG5 for VC polycom HDX6000.I can call to some the remote side (I can see and hear any thing from them).But for the only one remote side I cannot see and hear from them.at the...
View ArticleClik here to view.
MIP to private address problem on SSG5
Hi all,I am having a problem about connection from private IP address to internet with SSG5.My configuration on SSG5 is that I have a private IP address (10.192.10.100) in trust zone. Then I set one...
View ArticleClik here to view.
SSG 5 - get VIP to look for route in Untrust-vr
Hi I am having a problem to get VIP to work. I have a DMZ zone in Untrust-vr.I want to be able to configure a VIP on Untrust and send the traffic to the DMZ zone. I can't get it to work. It just keeps...
View Articlenat incoming source with MIP (ScreenOS)
Our network 192.168.10.0/24 (netA). Partner network 192.168.1.0/24 (attach topology). 192.168.10.10 (serverA) is our server. We have some partners have same remote LAN: 192.168.1.0/24 (netB). Iam...
View Article