On SRX100, SRX110, SRX210, and SRX220 devices with FTP ALG enabled, ICMP redirect might not work for FTP traffic. When FTP ALG is enabled on SRX100, SRX110, SRX210 and SRX220, ICMP redirect does not work. However, It only affect FTP traffic and Ping or other traffic will work without any problem. Once Ping packet is through, FTP connection will be success. Without ping or … [Read more...]
VLAN firewall filter and VRRP packet processing in EX switch
This article describes how VRRP packets are processed in EX switch while a firewall filter is applied on input direction of a VLAN. Firewall filter applied in input direction of a VLAN blocks the transit VRRP multicast packets . On the EX switch packet filtering always happens in the hardware. If there is a filter applied in input direction of a VLAN then each packet has … [Read more...]