Multi-Domain Security Management Model:

Using the Multi-Domain Security Management model, administrators centrally manage multiple independent networks, typically belonging to different Domains, divisions or branches. The Multi-Domain Server is the central management node that controls the network and security policy databases for each of these networks.
Each Domain network is managed by a Domain Management Server, which provides the full functionality of a Security Management Server and can host multiple Virtual Systems, virtual and physical devices. The server that manages the VSX Gateway is the Main Domain Management Server. A VSX Gateway can host Virtual Systems that are managed by different Domain Management Servers.

1. Smart-Domain Manager

2. Multi-Domain Server

3. Smart-Dashboard

4. Domain Management Server

5 Main Domain Management Server

6. VSX Gateway

7. Virtual Systems in Domain Management Servers

Juniper SRX Packet Flow

Juniper SRX Packet Flow:

SECURITY SERVICES PACKET WALK

1) Pull packet from queue

2) Police packet

3) Filter packet

4) Session lookup

5a) No existing session

•FW screen check

•Static and destination NAT

•Route lookup

•Destination zone lookup

•Policy lookup

•Reverse static and source NAT

•Setup ALG vector

•Install session

5b) Established session

•FW screen check

•TCP checks

•NAT translation

•ALG processing

6) Filter packet

7) Shape packet

8) Transmit packet