Kind of new to SRX and just received a new SRX320 (15.1X49-D140.2). While setting it up, the default web management is on the untrust. Now, I'm sure I can just turn it off but I'd like to have management on the inside/trust.
Also, I was under the understanding that dynamic VPN will not work if the management isn't on the outside/untrust interface.
Is there a way of moving the web management to the trust interface or add an access list to deny access to the web management on the untrust interface without restricting dynamic VPN?