networking-forum.com
Community Blog • Community Wiki * Register  * Search  * Login
View unanswered posts • View active topics

Board index » General » Forum Lobby

All times are UTC - 6 hours [ DST ]


Post new topic Reply to topic  Page 2 of 2
  [ 26 posts ]  Go to page Previous  1, 2
  Print view Previous topic | Next topic 
Author Message
Vito_Corleone
PostPosted: Sun Apr 08, 2012 9:01 am 
Offline
Moderator
Moderator
User avatar

Joined: Mon Apr 07, 2008 10:38 am
Posts: 9390
Location: Orlando, FL
Certs: CCNP RS, CCNP DC, CCDP, CCIP
burnyd wrote:
Vito_Corleone wrote:
I fucking hate ScreenOS. I'm working on a migration from SSG to ASA and it's hell.


wtf? You are prolly the first person I have ever heard say anything like that.

The benefit to ScreenOS in my experiences is its pretty damn easy and almost anyone can work with it. The cli is crap but the GUI is pretty nice. Where I used to work we switched over to SRX's which are all about cli and the GUI isnt the best not that it bothered me working with Junos in the past. But I feel the Netscreens are great especially for their age.


Maybe I'm crazy, but nothing is easy with those things. Hell, even finding NAT config from the GUI is a pain in the ass and seems hidden. Am I using an old version or something?

_________________
http://blog.alwaysthenetwork.com
Top
 Profile  
 
mellowd
PostPosted: Sun Apr 08, 2012 10:39 am 
Offline
CCIE #38070
CCIE #38070
User avatar

Joined: Wed Jun 18, 2008 7:49 am
Posts: 12425
Location: London, UK
Certs: CCIE ,CC-NP/IP, JNCIP-SP, JNCIS-ENT, BC-/SPNE/NP
Nat is easy. Go to policy - advanced - NAT

_________________
www.mellowd.co.uk/ccie/
Top
 Profile  
 
Vito_Corleone
PostPosted: Sun Apr 08, 2012 10:49 am 
Offline
Moderator
Moderator
User avatar

Joined: Mon Apr 07, 2008 10:38 am
Posts: 9390
Location: Orlando, FL
Certs: CCNP RS, CCNP DC, CCDP, CCIP
But I have to do that for each policy, no?

_________________
http://blog.alwaysthenetwork.com
Top
 Profile  
 
mellowd
PostPosted: Sun Apr 08, 2012 11:19 am 
Offline
CCIE #38070
CCIE #38070
User avatar

Joined: Wed Jun 18, 2008 7:49 am
Posts: 12425
Location: London, UK
Certs: CCIE ,CC-NP/IP, JNCIP-SP, JNCIS-ENT, BC-/SPNE/NP
If you do it via policy yes. If you do it via interface you don't need to

_________________
www.mellowd.co.uk/ccie/
Top
 Profile  
 
Vito_Corleone
PostPosted: Sun Apr 08, 2012 11:32 am 
Offline
Moderator
Moderator
User avatar

Joined: Mon Apr 07, 2008 10:38 am
Posts: 9390
Location: Orlando, FL
Certs: CCNP RS, CCNP DC, CCDP, CCIP
Well shit, that definitely makes things easier, thanks!

For the record though, that's not very intuitive and I still hate this shit. There should be a big fucking button labeled NAT, like every other firewall.

_________________
http://blog.alwaysthenetwork.com
Top
 Profile  
 
dieselboy
PostPosted: Sun Apr 08, 2012 7:42 pm 
Offline
Post Whore
Post Whore
User avatar

Joined: Tue Aug 05, 2008 6:36 am
Posts: 2426
Location: Perth, Australia
Certs: CCNP, CCNA Voice, SMB Select, Linux+
Vito_Corleone wrote:
Well shit, that definitely makes things easier, thanks!

For the record though, that's not very intuitive and I still hate this shit. There should be a big fucking button labeled NAT, like every other firewall.


/lol/

_________________
"Right actions in the future are the best apologies for bad actions in the past."
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 2 of 2
  [ 26 posts ]  Go to page Previous  1, 2

Board index » General » Forum Lobby

All times are UTC - 6 hours [ DST ]

Who is online

Users browsing this forum: Exabot [Bot] and 4 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group