Re: unable to access DVR through ssg5

Hi,

I see the below from your update:

"******the cameras are on port 3777 tcp 3778 udp and also use port 80

set service "cameras" protocol tcp src-port 37777-37780 dst-port 37777-37780
set service "cameras" + udp src-port 37778-37780 dst-port 37778-37780

set interface ethernet0/0 vip interface-ip 37777 "cameras" 192.168.1.86

set policy id 11 name "Camera" from "Untrust" to "Trust" "Any" "VIP(192.168.1.89)" "cameras" permit****"

1: Please modify your service to use any source port not only src-port 37777-37780 : https://kb.juniper.net/InfoCenter/index?page=content&id=KB4220&cat=SCREENOS&actp=LIST

2: Also, configure the correct  and only needed destination port.

Your service config should be something like below:

set service "cameras" protocol tcp src-port 1024-65535 dst-port 3777
set service "cameras" + udp src-port 1024-65535 dst-port 3778

Thanks,

Vikas