You have packet loss on an IPsec VPN using the default maximum transmission unit (MTU) where the packets have the DF-bit (do not fragment) set. Which configuration solves this problem?
An engineer has just created a single policy allowing ping traffic from a host in the Users zone to a server in the Servers zone. When the host pings the server, what will happen to the return traffic?
You are asked to change the behavior of the system-default policy from the default setting on an SRX Series device. What would be the result of this change?
You have just added the policy deny-host-a to prevent traffic from Host A that was previously allowed by the policy permit-all. After committing the changes, you notice that all traffic, including traffic from Host A, is still allowed. Which configuration statement will prevent traffic from Host A, while still allowing other hosts to send traffic?