On Thu, Aug 12, 2010 at 04:01:47PM -0700, Quoc Hoang wrote:
> IMHO, ALGS should be disabled by default.

From what I've seen, Juniper started disabling over half of the ALGs in
recent ScreenOS releases (probably the ones that JTAC has indicated
cause more problems than they solve).

I'm a little surprised they haven't done the same with the SRXes.  A
default install on my 210 w/10.2R2.11 shows all ALGs enabled except
IKE-ESP, strangely enough.

- Mark

-- 
Mark Kamichoff
[email protected]
http://www.prolixium.com/

Attachment: signature.asc
Description: Digital signature

_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to