.

Showing posts with label How juniper SRX process packets. Show all posts
Showing posts with label How juniper SRX process packets. Show all posts

Tuesday, December 23, 2014

Juniper SRX Packet Flow

Juniper SRX Packet Flow:

SECURITY SERVICES PACKET WALK

1) Pull packet from queue

2) Police packet

3) Filter packet


4) Session lookup

5a) No existing session

•FW screen check
•Static and destination NAT
•Route lookup
•Destination zone lookup
•Policy lookup
•Reverse static and source NAT
•Setup ALG vector
•Install session

5b) Established session

•FW screen check
•TCP checks
•NAT translation
•ALG processing

6) Filter packet
7) Shape packet
8) Transmit packet




Juniper SRX Packet Flow in detail (part 2)

Juniper SRX Packet Flow in detail (part 2)

SECURITY SERVICES PACKET WALK


About Services ALG Module:
An Application Layer Gateway (ALG) is a software component that is designed to manage specific protocols such as Session Initiation Protocol (SIP) or FTP on Juniper Networks devices running Junos OS. In Juniper SRX this is where all the services are being matched.
It has multiple module to process the services based on there service request.

1) AppID (Packet): The APPID (application identification) Module is a Junos OS feature that identifies applications as constituents of application groups in TCP/UDP/ICMP traffic.

2) IDP: This Module is use for Intrusion Detect Prevention.

3) SSL Proxy: This Module is use for SSL Inspection (ssl encrypted packet) 

4) ALG: The ALG module is responsible for Application-Layer aware packet processing.

5) UTM: With UTM module, you can implement a comprehensive set of security features that include antispam, antivirus, Web filtering, and content filtering protection.

6) AppFW: This Module is use for identifying and inspecting applications.

7) UserFW: UserFW module is foe identifying the users, basically it's identity awareness.