I found the ALGs on the SRX to be unreliable and most time doesn't work. We had to disable SQL/RPC/SIP ALGs on our SRX3600 (10.1) to get those services working.
IMHO, ALGS should be disabled by default. quoc --- On Thu, 8/12/10, Scott T. Cameron <[email protected]> wrote: > From: Scott T. Cameron <[email protected]> > Subject: [j-nsp] SRX3400: DNS ALG on 10.2R1 > To: [email protected] > Date: Thursday, August 12, 2010, 10:41 AM > Hello, > > I just had a very unusual production outage. > > All traffic was flowing through the SRX3400 (in chassis > cluster mode) no > problem. > > Suddenly, DNS started to fail. Was not passing > through the firewall at all > -- all other traffic was. > > The resolution was to disable the DNS ALG. > > Nothing interesting in the flow log. > > Anyone seen this? Tips? Tricks? ALGs are > evil? > > Scott > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
