Junos OS

Hello guys, how to record network probes from the external network?

Thank you.

Your question is a little vague.  But if you are talking about what options there are on the SRX firewall to detect scans, flooding and other basic attacks, I think you should start by looking at the "Screen" options.

http://kb.juniper.net/InfoCenter/index?page=content&id=KB16618

Hi Spuluka,

From the link you've given, i'm not able to execute the command from the site:

show security | match screen | display set

Here's what I have:

x-men007> show security |
^
syntax error, expecting <command>.
x-men007> show security |

How to check whether the "screen" options settings are configured?

Thank you.

Hi,

There is a typo in the KB.  'Configuration' keyword was missing in this operational mode command . 

Please use "user@host> show configuration  security | match screen | display set" operational mode command . 

If you are in configuration mode , user@host#show security | match screen | display set  works fine . 

Thanks Pradeep.

To show any match or logs, the command below will do? or what should be the command?

    show security screen statistics zone Untrust

Yes that is the command to see the logs.  if there are a lot of them you can use the | last to just show the last few messages

show security screen statistics untrust | last 25

Thanks Spuluka, your help is greatly appreciated.