Ashish, On 17/01/2012, at 1:19 PM, ashish verma wrote:
> In our SRX deployment I am seeing an issue where client does not receive a > ICMP message back after getting denied by the policy. > > I can see that packet got dropped by the policy and SRX generates the > tcp-rst but client does not receive anything. Can you confirm that your policy action is "reject" and not "deny"? Otherwise the traffic will be dropped silently. Cheers, Ben _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
