Networking Forum powered by InfoSec Insitute

[Vito_Corleone]

I fucking hate ScreenOS. I'm working on a migration from SSG to ASA and it's hell.

wtf? You are prolly the first person I have ever heard say anything like that.

The benefit to ScreenOS in my experiences is its pretty damn easy and almost anyone can work with it. The cli is crap but the GUI is pretty nice. Where I used to work we switched over to SRX's which are all about cli and the GUI isnt the best not that it bothered me working with Junos in the past. But I feel the Netscreens are great especially for their age.

Maybe I'm crazy, but nothing is easy with those things. Hell, even finding NAT config from the GUI is a pain in the ass and seems hidden. Am I using an old version or something?

[mellowd]

Nat is easy. Go to policy - advanced - NAT

[Vito_Corleone]

But I have to do that for each policy, no?

[mellowd]

If you do it via policy yes. If you do it via interface you don't need to

[Vito_Corleone]

Well shit, that definitely makes things easier, thanks!

For the record though, that's not very intuitive and I still hate this shit. There should be a big fucking button labeled NAT, like every other firewall.

Well shit, that definitely makes things easier, thanks!

For the record though, that's not very intuitive and I still hate this shit. There should be a big fucking button labeled NAT, like every other firewall.

/lol/