Interesting find...
But, if the P2 negotiation packets are dropped on the SRX due to intrazone block, I would expect the Phase-1 negotiation to be dropped in the first place because both P1 and P2 use the same UDP500/4500 session. Any ideas?
↧
Channel:
All ScreenOS Firewalls (NOT SRX) posts
X
Are you the publisher?
Claim or
contact us
about this channel.
X
0
Channel Details:
- Title: All ScreenOS Firewalls (NOT SRX) posts
- Channel Number: 58457488
- Language: English
- Registered On: January 22, 2016, 8:28 pm
- Number of Articles: 2577
- Latest Snapshot: October 21, 2020, 2:51 am
- RSS URL: http://forums.juniper.net/jnet/rss/boardmessages?board.id=firewalls
- Publisher: https://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/bd-p/Firewalls
- Description: All ScreenOS Firewalls (NOT SRX) posts
- Catalog: //screenos5.rssing.com/catalog.php?indx=58457488
© 2026 //www.rssing.com