[j-nsp] SRX3400: DNS ALG on 10.2R1

[Mark Kamichoff]

On Thu, Aug 12, 2010 at 04:01:47PM -0700, Quoc Hoang wrote:
> IMHO, ALGS should be disabled by default.

From what I've seen, Juniper started disabling over half of the ALGs in
recent ScreenOS releases (probably the ones that JTAC has indicated
cause more problems than they solve).

I'm a little surprised they haven't done the same with the SRXes.  A
default install on my 210 w/10.2R2.11 shows all ALGs enabled except
IKE-ESP, strangely enough.

- Mark

-- 
Mark Kamichoff
prox at prolixium.com
http://www.prolixium.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20100812/efe02518/attachment.bin>