SSG-5-SH Loops
SSG-5-sh loops all the time in startup,What can I do ?I already upgrdade Bootloader and Screen OS but it does not help
View ArticleSSG-5-SH no reaction
HI,I have problems with 3 SSG-5-SH for this moment.I have already 2 topics open on the other 2 SSG-5-SH. NOw here my 3rd one.I bought it on eBay because I wanted to have a spare SSG-5-SH.When I put...
View Articletcp-syn-check
Hello, Have a weird one here. We have an ISG2000 HA pair that we have tools behind it that manage devices all over the country. We have enabled tcp-syn-check on it. Since then. We have a found devices...
View ArticleMonitoring (current bandwidth usage..)SSG FW interface
Hi I have SSG FW and want to moniotr interface traffic. on Junos, there is " monitor interface x " so we can see realtime traffic. I am wondering if SSG FW has any similar command that I can check....
View ArticleSSG Group address modification
HiI would like to remove the one address from only group entry, leave the entry, what is best way to remove from group entry?1)set group address “inside” "SERVER” add "10.10.10.1”set group address...
View ArticleCheck if packet is hitting fw when troubleshooting for new policy
Hi When we add new policy and troubleshooting if something is not working as expected, i want to know if the packet is hitting FW.In Cisco ASA, there is gui monitoring logging is available so we know...
View ArticleAllow PING from Specific IP Address to Outside.
Juniper Screen OS. SSG5 v6.3 I am new to Juniper stuff. I have juniper firewalls that are pingable but I only want to allow specific IP Addresses to ping the Outside (Untrusted) interface from the...
View ArticleMultiple vlan from one zone to Multiple zone
HiI would like to confirm my understanding is correct. Now, let's say, i have 3 sub interface but it is belong to all the same zone and I want to divide three different zones.Config is quite straight...
View ArticleClik here to view.
Questions about the basic route settings(SSG-350M)
Model: ssg-350M Ienter themost basicsettingswith the CLII found astrange thingI've enteredthe default gateway of theuntrustI could not find it in the "get config" And as shown belowIfmore I can...
View Articleinterface on vsys
We have an isg2000 with multiple sys. We have a need to add an additional vlan/subinterface to the trust side of the vsys.. Can I do this without interrupting current production on that interface?for...
View Articleauto failover on ssg350 clustered(NSRP enabled)
Hello Dears, im trying to configure redundent links, auto failover between two sites( one site has Juniper SSG350 and the other site has Cisco ASA). below are the details of the current setup:Cisco...
View Articleconfiguring two subnets towards the same destination with different routes
Hello Dears, i have created to two Route Based VPNs (using two ISPs) on my SSG350 towards Cisco ASA,in my LAN(connected to SSG350)i have two sunbets( 10.123.236.0 and 10.123.237.0)on the remote site (...
View ArticleBasic BGP Configuration
I currently have a NSRP configuration w/ the ISP providing a handoff w/ a static ip address and a default route pointing to the carrier equipment. The carrier has advised that they will be moving this...
View ArticleMTU configuration for lan to lan VPN
Hello, I was reading the topics regarding how to troubleshoot MTU problems, and I would like to ask for a direction about this.I`m using a SSG140 to establish lan to lan VPN with customers (several...
View ArticleWhat is the real memory allocated on ISG1000
Hello all,I suffer from whether it is correct memory?Please see below verification.-----------------------------------------------------------nsisg1000-> get systemProduct Name:...
View ArticleSSG ScreenOs Upgrades
I have some SSG5, 20 & 140 firewalls to upgrade, all are currently running 6.2.0r5.0 & i am looking to go to version 6.3.0r21.0.To my knowledge, none of the existing firewalls currently have a...
View Articletwo default routes to the internet with failover...
dears, my device is SSG350is there any way to add two defualt routes towards the internet and if the first internet link went down it will automatically forward the trafiic using the second...
View Article[ScreenOS] PBR setup for multi interfaces
Hi, I have a setup in which I need to direct some traffic to my static ADSL connection, yet direct the rest to the our fast VDSL. Device: NetScreen 25ethernet1: Trust (our subnet)ethernet2:...
View ArticleConfiguring Route based VPN on 2 site but failed to access server on the same...
Hello Contributor/Expert and all members, I've a weird incident on my VPN configuration. Would appreciate if someone can contribute some knowledge and expertise. The scenario is: - Server in HQ need...
View ArticleThe boot loader ISG2000 authentication issues
Hello.I have a question.I ISG2000. However, this does not run.I would like to know why.Thank you!! OS Loader File Name [Load1000v103.d]: Load2000v117.dSelf IP Address [192.168.1.1]: TFTP IP Address...
View Article