Re: [j-nsp] SRX3600 weirdness

2013-05-02 Thread Eugeniu Patrascu
First option would be to check to see if the IMAP client is using the IMAP IDLE command. If so, you might want to disable this option. Or configure the SRX to never timeout this connections (not sure if possible). Second option would be a check to see what screening options you have from untrust

[j-nsp] SRX3600 weirdness

2013-04-23 Thread James S. Smith
Just in the process of finishing a project of migrating subnets behind an SRX3600, and we've run into some odd behavior. We have a database subnet outside the firewall, and an exchange server subnet behind the firewall. A database server uses IMAP4 over SSL (TCP 993) to send emails to

Re: [j-nsp] SRX3600 weirdness

2013-04-23 Thread Jonathan Lassoff
On Tue, Apr 23, 2013 at 1:56 PM, James S. Smith jsm...@windmobile.cawrote: Just in the process of finishing a project of migrating subnets behind an SRX3600, and we've run into some odd behavior. We have a database subnet outside the firewall, and an exchange server subnet behind the

Re: [j-nsp] SRX3600 weirdness

2013-04-23 Thread Andrew Miehs
Sent from a mobile device On 24/04/2013, at 6:56, James S. Smith jsm...@windmobile.ca wrote: We have a database subnet outside the firewall, and an exchange server subnet behind the firewall. A database server uses IMAP4 over SSL (TCP 993) to send emails to Exchange. The connection

Re: [j-nsp] SRX3600 weirdness

2013-04-23 Thread James S. Smith
: Re: [j-nsp] SRX3600 weirdness Sent from a mobile device On 24/04/2013, at 6:56, James S. Smith jsm...@windmobile.ca wrote: We have a database subnet outside the firewall, and an exchange server subnet behind the firewall. A database server uses IMAP4 over SSL (TCP 993) to send emails

Re: [j-nsp] SRX3600 weirdness

2013-04-23 Thread OBrien, Will
- From: Andrew Miehs [mailto:and...@2sheds.de] Sent: April-23-13 7:40 PM To: James S. Smith Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] SRX3600 weirdness Sent from a mobile device On 24/04/2013, at 6:56, James S. Smith jsm...@windmobile.ca wrote: We have a database

Re: [j-nsp] SRX3600 weirdness

2013-04-23 Thread Pavel Lunin
2013/4/24 James S. Smith jsm...@windmobile.ca I found that a bit strange myself, but we log all traffic flows through the firewall and the only communication going on was on port 993. Traffic log is a bad clue for that sort of issues, really. You'd need to use flow traceoptions to check out 1)