[j-nsp] SRX and MS Lynx

[Mike Gonnason]

Hi Bill,

I have a Lync front end server deployed in a DMZ hung off an ASA (haven't
had time yet to swap them out for SRX). We just have static NATs and the
usual ACLs permitting the traffic. There are quite a few ACLs though,
especially if you want to support Federation. Your Lync deployment people
should be able to provide you with a full list of required ACLs for the
functionality you are aiming for.

-Mike Gonnason

On Mon, Feb 2, 2015 at 3:30 PM, Bill Blackford <bblackford at gmail.com> wrote:

> I'm not finding anything cases in the archives on this.
>
> Has anyone deployed Microsoft Lync 2010 behind a branch SRX?
> Besides the reverse proxy, there is the SIP and XMPP components. Is this a
> matter of a series of static NAT's for the edge servers or does this get
> tricky and require ALG's?
> I've read the SRX does not support the proper ALG using TCP but UDP only.
>
> What I'm looking for is a deployment document for the SRX. Does this exist?
> Is this doable?
>
> Thanks in Advance.
>
> --
> Bill Blackford
>
> Logged into reality and abusing my sudo privileges.....
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>