which step in the packet flow are Junos Screen checks applied?

At which step in the packet flow are Junos Screen checks applied?

At which step in the packet flow are Junos Screen checks applied?

A.
prior to the route lookup

B.
prior to security policy processing

C.
after ALG services are applied

D.
after source NAT services are applied



Leave a Reply 4

Your email address will not be published. Required fields are marked *


3abdontha3if

3abdontha3if

screen options are also prior to route lookup
and route lookup is prior to policy lookup
so I think that A is also valid

Shahid

Shahid

Yes I agree;
Flow module: Screen –> D-NAT –> Route & Zone lookup –> Policy lookup

networkengineer

networkengineer

I agree that option A is correct, however because the Juniper study guide says “the main advantage of using Screen options is that the Junos OS performs Screen checks prior to security policy processing, which results in fewer resources used for malicious packet processing”, I would choose option B.