SRX

last person joined: 3 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  ALG for custom services

    Posted 02-27-2012 04:40

    Hi, How can i make alg's work for services running on non-standard ports. I have been going through the documentation without much luk Smiley Sad

     

    any links to documentation would be really helpful.



  • 2.  RE: ALG for custom services

    Posted 02-27-2012 05:16

    Hi,

     

    You can create a custom application and call the same in security policy. Here is the sample snippet:

    user@host# set applications application my-dns term dns-tcp protocol tcp

    user@host# set applications application my-dns term dns-tcp destination-port 215

    user@host# set applications application my-dns term dns-tcp application-protocol dns

    user@host# set applications application my-dns term dns-udp protocol udp

    user@host# set applications application my-dns term dns-udp destination-port 215

     user@host# set applications application my-dns term dns-udp application-protocol dns  

     

    Hope this helps.

    Regards,

    Visitor

    --------------------------------------------------​--------------------------------------------------​---

    If this post was helpful, please mark this post as an "Accepted Solution".Kudos are always appreciated!



  • 3.  RE: ALG for custom services

    Posted 02-28-2012 00:17

    Thank you. However the below command ( application protocol ) doesnt' seem to be available , I am running 11.1R6.4

     

    set applications application my-dns term dns-tcp application-protocol dns

     

     

    it's available immediately under the " set application my-dns " hierarchy , but not availble under the term



  • 4.  RE: ALG for custom services
    Best Answer

    Posted 02-28-2012 03:53

    Hi,

     
    Try the following :

    user@host# set applications application my-dns protocol tcp
    user@host# set applications application my-dns destination-port 215
    user@host# set applications application my-dns application-protocol dns

     

    Hope this helps.

    Regards,
    Visitor

    --------------------------------------------------​--------------------------------------------------​---
    If this post was helpful, please mark this post as an "Accepted Solution".Kudos are always appreciated!