There are two default routes for Internet access via different ISPs using load-balance. However, the HTTPS traffic from ISP2 was blocked by a filter on the outbound interface towards the Internet. The filter was aimed to block JWEB access from untrusted sources. The customer would like to permit the HTTPS traffic for Web access, and at the same time, block J-Web login from untrusted sources. SSL VPN is enabled. 

There are two default routes for Internet access via different ISPs using load-balance. However, the HTTPS traffic from ISP2 was blocked by a filter on the outbound interface towards the Internet. The filter was aimed to block JWEB access from untrusted sources. The customer would like to permit the HTTPS traffic for Web access, and at the same time, block J-Web login from untrusted sources. SSL VPN is enabled. 

Please follow the steps below to block J-Web access from untrusted lists while permitting HTTPs traffic:

+ Specify a different port than HTTPs for J-Web access

# set system services web-management https port aaaa

+ Configure management-url to coamplify the J-Web access

# set system services web-management management-url <value>

+ Configure a firewall filter to permit J-Web access from trusted list only

firewall {
    family inet {
        filter permit-J-Web {
            term term1 {
                from {
                    source-address {
                        x.x.x.x/32;
                        y.y.y.y/24;
                    }
                    protocol tcp;
                    port [  aaaa https ];
                }
                then accept;
            }
            term deny {
                from {
                    protocol tcp;
                    port [ aaaa ];
                }
                then {
                    discard;
                }
            }
            term accept {
                then accept;

+ Apply the filter to the interface towards Internet