Newbie question on Untrust IP range
L.s. Until yesterday, I was stuck with a dynamically assigned IP address from my ISP.All was working well with my SSG5. Yesterday, I moved to a new place and my new ISP assigned me a /29...
View ArticleClik here to view.
Policy Using IP address
Hi all, It is possible to set a policy to allow connection from 172.16.25.13 to 172.16.30.7 but reject connection to 172.16.30.6 ,and allow connection from 172.16.25.3 to 172.16.30.6 but reject...
View ArticleClik here to view.
SSG5 firmware upgrading in a VRRP environment
Hey guys, I hope this message finds you well. I have a question (or more of a confirmation of my suspicions) regarding updating firmware in a VRRP environment. We have the following set-up: What I...
View ArticleChanging tunnel interface MTU on SSG5
Hi, I have two SSG5 firewalls running the latest firmware. Each firewall is connected to the internet. Behind the firewall are two private networks A and B. I have an ipsec tunnel connect A and B....
View Articlehigh cpu isg2000
Hello, been fighting high cpu on a juniper isg2000 firewall running 6.3.0r17b.0. firewall(M)-> get performance cpu all detail Average System Utilization: 76% (flow 85 task 85)Last 60 seconds:59:...
View ArticleClik here to view.
help guys..!! (address: duplicate entry issue)
Hello all,I have a problem when configuring IP on policy. As you can see below captured picture, there are IP which are same.When I configured these, "address:duplicate entry" sentence appeared..! so,...
View ArticleUpgrade Path
Dear All , Could someone suggest upgrade path from 6.0.0r4.0 to 6.3.0r21 .Please help on urgent basis .
View Articlecannot get ssg5 software upgrade
Hello all,I am wondering if anyone can help. We purchased a SSG5 and before connecting to the internet we thought we'd upgrade the software.We contacted juniper and as we hadn't bought from an...
View ArticleClik here to view.
How to configure web-filtering?
Hello all, I have a problem regarding of web-filtering.I've used a filrewall : ISG-1000. I already know that ISG-1000 do not support to block HTTPS(443).So, I decided that I have to block URL by...
View Articlehow to do commit check and show | compare in NS500
Hi all Suddenly I find myself having to touch an old NetScreen 500 and I have only touched SRX before. I know in SRX there is show | compare and commit check. But reading through the NS500 CLI guide I...
View ArticleClik here to view.
is my packet going out of the firewall or not!?
Hi all I need a bit of help with one, cause I am very new to NetScreen so I am a bit confused by this debug trace that I took. It seems to me that my packet is leaving the firewall, but at the same...
View ArticleIn SSG, can I have MIP and VIP in the same external IP and different internal...
Hi everyone, I have a SSG with a MIP (for example 1.1.1.1 to 192.168.0.20), but I also want to configure a VIP in the same external IP for a different internal IP (1.1.1.1 to 192.168.0.100), and this...
View ArticleSSG5 debug proving to the cisco guy that the issue is...
I have a situation where an ssg5 is connected to the lan bg0 10.10.10.10/24 and on BG1 10.10.30.0/24 is a VoIP system. (The data is cisco and voice is juniper) I manage the VoIP network which is...
View ArticleSSG140 failed during upgrade
Hi all, I have perfomed software upgrade but stuck after upgrade imagekey.cer.Only POWER led is green, others are OFF and I get this message when console the router: Self IP Address [10.10.10.13]:TFTP...
View ArticleBootloader 1.3.2 or 1.3.3 for SSG-5 needed
Hello, I bought SSG5 (second hand)I haven't credentials and the console is disabled. I need bootloader version 1.3.2 or 1.3.3 (with old signing key) to erase completely this devide and load again a...
View ArticleVPN connectivity going up and down intermittently between ISG 1000 and SSG350M
we have SSG-350M and ISG1000 at one site. The VPN tunnel was up till the time we reloaded our core switches as some routing was changed and everything was disrupted.I have cleared the sa and...
View ArticleHello Juniper I have a question. I want to know how you can download the...
Good morning . juniperHave a nice day todayI am a network engineer in KoreaI want to know how to get the Screen OS Download I want to receive permission to download I really want to know how to get...
View Articlessg140 - bgroup interface with different settings?
hello guys,can i put in a bgroup 2 interface with different physical settings?I need to have a port at 100mbps and one other at 10mbps...if i try this config could i have problem?thx in advancebye
View ArticleClik here to view.
Dial-up VPN isnt working with service rule except any
Hi everyone, I have created a Dial-up VPN. It is working with policy which has permission for any services. When i change service rule to spesific service ( it may be ping or rdp whatever ), it doesnt...
View Article