ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

View my internal network server on the Internet

02.10.12   |  
‎02-10-2012 08:49 PM

I have a server in my office and I wonder how I can access from the Internet. I wish to enter that server to perform remote configurations do. I have a SSG140.

Thank you very much

2 REPLIES
ScreenOS Firewalls (NOT SRX)

Re: View my internal network server on the Internet

02.11.12   |  
‎02-11-2012 05:14 AM

Your most secure option for this would be to setup remote access to your LAN then connect to the server on this.  The feature is called Dynamic VPN.

 

This is the kb that outlines the various configuration options.

http://kb.juniper.net/InfoCenter/index?page=content&id=KB8535

These reference the netscreen client but this will not support Win7.  If you have win7 clients you will need to choose either the officially supported but paid NCP client.  See this thread

http://forums.juniper.net/t5/ScreenOS-Firewalls-NOT-SRX/FAQ-available-for-NCP-s-IPsec-VPN-client-NCP...

And the kb
http://kb.juniper.net/InfoCenter/index?page=content&id=KB17266

Or the Shrew open source client.
http://www.shrew.net/support/wiki/HowtoJuniperSsg

 

Your other option is to configure Remote Access on your server.  Assuming this is windows these are the relevant sections for the server and firewall changes.

 


Windows 2003 RAS

To  use the windows server method these are the instructions.  

configuring RAS on Windows 2003
http://technet.microsoft.com/en-us/library/cc787153%28WS.10%29.aspx

Troubleshooting RAS connections
http://technet.microsoft.com/en-us/library/cc772616%28WS.10%29.aspx

On the firewall you then allow this traffic forwarded from you public ip address
http://kb.juniper.net/InfoCenter/index?page=content&id=KB5471

Steve Puluka BSEET
Juniper Ambassador
Senior IP Engineer - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
JNCIA-Junos JNCIS-SEC JNCIP-SEC JNCSP-SEC
JNCIS-FWV
JNCDA JNCDS-DC JNCDS-SEC
JNCIS-SP
ACE PanOS 6 ACE PanOS 7
http://puluka.com/home
ScreenOS Firewalls (NOT SRX)

Re: View my internal network server on the Internet

07.18.12   |  
‎07-18-2012 08:01 AM

Excellent. You saved my life.

 

I really appreciate it. Be well.