Re: Route Tagged
You are correct, tags cannot be added to connected routes they are only available when creating a static route.
View ArticleSSG-140 PBR reverse web proxy failover?
We currently use an SSG-140 firewall in front of our servers and I am interested in setting up a reverse web proxy. I know I can do that using policy based routing and directing the traffic to a proxy...
View ArticleRe: SSG-140 PBR reverse web proxy failover?
PBR is marked down automatically if the next hop is not reachable or the exit interface can be brought down using the track-ip. There is no tracking for the PBR for a specific destination. Thanks,Vikas
View Articlecommand to check whether session already reach the througput on ISG2000?
Hi all, May i know what command that we can use to see whether the firewall session already reach the limit on ISG2000. For example the current ISG2000 always reboot due due to reach the maximum...
View ArticleRe: command to check whether session already reach the througput on ISG2000?
you can check it using 'get session info' Thanks,Vikas
View ArticleInvalid subnet
I noticed that ScreenOS would take an invalid subnet on address object like "set address 'Trust' 'subnet' 192.168.10.0 255.255.0.0" Does the firewall match on 192.168.0.0/16?
View ArticleRe: SSG-140 PBR reverse web proxy failover?
So if the proxy server was totally down or the ethernet link was down the PBR would be ignored? But if the squid proxy software just wasn't responding, the PBR would still be in effect and the traffic...
View ArticleRe: Invalid subnet
Yes, the address object will match traffic for the entire 16 indicated by the mask.
View ArticleRe: SSG-140 PBR reverse web proxy failover?
That is correct, the only track option available is ping not a service.
View ArticleRe: Invalid subnet
Thanks spuluka. I assumed that was the case, but I just wanted to make sure.
View ArticleRe: How I can make BGP configuration on SSG-140
Hi, All configurations seems to be ok but again we do not have access to remote side IPs.There is one specification in our system. E0/6 port is connected to ISP and it is with IP from another network....
View ArticleRe: How I can make BGP configuration on SSG-140
From you thread I assume you have a site to site VPN that is not passing traffic. to assist I would need you to follow the steps in this kb article, and then post the results of the step where the...
View ArticleRe: How I can make BGP configuration on SSG-140
Hi, I will try to colelct the required infomration in next two weeks. VPN-s are UP ad they are route-based destionation routings on boths sides are same and the most strange thing is that from other...
View ArticleRe: How I can make BGP configuration on SSG-140
It would be best to run the testing then from the side that does not send traffic.
View ArticleSSG 140 Without access
Hi, i have a problem with our SSG140 . After restart the system, i can´t any access to the ssg 140.Neither console or gui web. The power LED are on and all green LED from LAN port´sWhat can i do?...
View ArticleRe: SSG 140 Without access
When connected to the console port and doing a fresh power on, do you see any output at all? If there is a recovery option connecting to the console and doing a fresh boot will be the way to access this.
View ArticleRe: SSG 140 Without access
Hi,no. Nothing no output..... Which recovery option do you mean? BR Stephan
View ArticleRe: SSG 140 Without access
Without any output at all on the console there are no options to recover. Can you confirm that you have the appropriate serial console adapter and your terminal program setup with 9600, 8,n,1 settings?...
View Article