Hi all, I am new to Juniper. The trust zone of my SRX300 is able to access internet if I configure my SRX for untrust zone to be as dynamic IP from ISP. However, if I configure untrust zone as static IP, the trust zone is unable to access internet. Do not know whether there are any wrong configurations ...

Hi all, Another alternative i think need to use SecIntel feature so it will have all list ip address from Azure. Thanks

Hi All, Is the config below is correct? The objective was from source-address is "*.azurewebsite.net". Appreciate any advise. [edit] root@JSRX1600# run show configuration security utm | display set set security utm custom-objects url-pattern urllist1 value http://*.azurewebsites.net set security ...

Hi @asharp , If i dont have list of web site that dont need to block then i just made cust-permit-list only right? If the url not in the list is it will by default block? set security utm feature-profile web-filtering juniper-local profile localprofile1 category cust-permit-list action log-and-permit ...

Hi Yan, How are you loading the configuration? Are you using set commands or compiling and loading a configuration file. You can make use of some of the 'replace:', 'merge:' and 'patch:' options available in the configuration stanza, also xmlns has it's own way of replacing sections of configuration. ...

Hi @asharp , If i see url that u shared it's still need list of domain need to be put in the UTM custom-objects url-pattern. Or i miss understood it. Thanks and appreciate your feedback

Hi Gavin I found working solution. In the starter configuration I assign dhcp to vme interface. Then my shell script sets needed IP address on me0 interface. I have though yet another question. When my shell script finishes the work I need remove or disable event-options configuration. I tried to ...