ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

Invalid subnet

‎07-12-2017 03:20 PM

I noticed that ScreenOS would take an invalid subnet on address object like "set address 'Trust' 'subnet' 192.168.10.0 255.255.0.0"

 

Does the firewall match on 192.168.0.0/16?

2 REPLIES 2
Highlighted
ScreenOS Firewalls (NOT SRX)
Solution
Accepted by topic author pevangelista
‎07-14-2017 05:43 AM

Re: Invalid subnet

‎07-13-2017 05:19 PM

Yes, the address object will match traffic for the entire 16 indicated by the mask.

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
Highlighted
ScreenOS Firewalls (NOT SRX)

Re: Invalid subnet

‎07-14-2017 05:43 AM

Thanks spuluka. I assumed that was the case, but I just wanted to make sure.

Feedback