Translated Source Address Using Default Gateway Not Alternate Public IP
Please keep laughs to a minimum, I have an ancient 204 series and I'm having issues routing out through a second interface on a second public subnet. I have two separate public subnet ranges, one on...
View ArticleMultiple Ethernet adapters (mac addresses) and one reserved ip address
Hello!Cannot find anything on the subject: how to configure an ip reservation for a machine with multiple Ethernet cards on Juniper SSG5? For example a server with 2 Ethernet cards wit separate mac...
View ArticleCannot access Juniper SSG5 through https
Hi,As mentioned in the topic, I cannot access the device through https. SSL is on, connection over http works without problems as long as I do not activate the "redirect to https" option. What else...
View ArticleVPN Phase-1 issues between a Juniper ISG-1000 and a Virtual Pal Alto.
Folks, We are working on a VPN tunnel establishment from a Juniper firewall to a Palo Alto Firewall. The Juniper Firewall gives us the below error: “Rejected an IKE packet on ethernet1/2 from...
View ArticleVPN client receives incorrect subnet mask
Hi!I configured my vpn connection to the SSG5 device according to this:https://www.shrew.net/support/Howto_Juniper_SSGThe connection works with one small problem - my client obtains 255.255.255.255...
View ArticleNetscreen VPN Debugging tools
Hi All i was wondering if anyone could point me in the direction of some decent debugging tools/commands for a netscreen firewall (details below ), i'm specifcally looking to isolate system messages...
View ArticleLicenses
Hello everyone. Can anyone guide me , from where to buy licenses and how much it cost per year. Anti-Virus , Spam , Filtering. I've tried to contact with them few times, but it's like a ghost town....
View ArticleWhat does the "ASP tcp proxy" do?
Hi! While running a debug flow basic to troubleshoot a connection I encountered the following line:packet dropped, ASP tcp proxy will rebuild a new oneCan anyone enlighten me as to what the ASP tcp...
View ArticleSIP and Video on SSG320M
Hi! Is it possible to send video traffic over the SIP ALG?Someone hinted that my predecessor already tried getting video over SIP to work but our firewalls were not able to handle it at the time.I only...
View ArticleNeed Help : Routing 2 different LANs to 2 different internet providers
Hello evrybody,i have juniper SSG20 , i want that the lan of VoIP uses an interface for lan who routes to a wan interface and the Data lan interface touted to another interface.for exemple :Ethernet...
View ArticleInternet dropping
Hi community, Last monday we started having issues regarding packet loss when opening multiple websites.A simple representation of our network is ISP=>WAN(modem)=>Juniper=>Switch1=>Multiple...
View ArticleSSG550 Traffic from DMZ to Untrust failed
Traffic can't go out/in from DMZ to Untrust zone. I created policy to permit a host in DMZ to any in Untrust zone but nothing happen.I tried source NAT policy for the host in DMZ zone to Untrust zone...
View ArticleClik here to view.
Self-signed Certificates on NSRP Cluster
Hi! Our self-signed certificates on SSG320's have expired and I have generated new ones.While the new certificates are working fine (although the cipher suits are insanely outdated ) on the...
View ArticleSSG140 maxed out at about 75MB when traffic shaping is turned on
All,I'm seeing an issue where simply turning on traffic shaping without any policy or bandwith configuration on the interface results in a max throughput of about 75MB. I have a 300mb internet...
View ArticleOSPF help with 'recv bad LSR from neighbor'
I'm trying to get OSPF over an IPSec tunnel between an SSG-20 and a Ubiquiti EdgeRouter. The tunnel is fine and works well with static routing, but OSPF is not working. They are exchanging OSPF data,...
View Articlepurpose of bgroup
What is the use of bgroup for the interfaces? they work like link agg? I can't find a good guideline that explain this. any help?
View ArticleTranslating IP
Hello all, Please help me figure out how to create rule for my purpose. I would like to retranslate public IP to private IP when trying to connect to external IP from internal network. Let's say i...
View ArticleModify the routing behavior of an SSG5-Serial firewall.
Folks,Presently we have configured VPN on a Juniper SSG5-Serial firewall. The default route this firewall gets is over it's Untrust Interface because the Untrust Interface receives an DHCP IP address....
View ArticleNS5200 and MIP Problem
Hope someone can see what i am missing or doing wrong. My Scenario is the folowing, i have a NS5200 running on 6.3.0r25.0. It hangs of my Cisco Router via a port 2/1 and has an Address of...
View ArticleHas SSG20 firewall implanted the NTP RFC standard
Dear all, at Honeywell we sell safety Systems. One of our customers is using the SSG20 firewall as an NTP server to synchronize the time with our safety system. Does the SSG20 firewall have the NTP RFC...
View Article