Description


Firewall configuration is getting committed if there is no Address / Services are objects.

/config/license/JUNOS597682.lic:1:(0) : Ignoring the license for feature id: 4158.This feature is not used by your product.
[edit security policies from-zone zone1 to-zone zone2]
'policy policy1'
warning: Source address or address_set (1x.x.x.x/x) not found. Please check if it is a SecProfiling Feed.
[edit security policies from-zone zone1 to-zone zone 2]
'policy Ipolicy 1'
warning: Source address or address_set (x.x.x.x/x) not found. Please check if it is a SecProfiling Feed.
[edit security policies from-zone policy 1 to-zone zone 1]
'policy policy 1'
warning: Destination address or address_set (x.x.x.x/x) not found. Please check if it is a SecProfiling Feed.
[edit security policies from-zone zone 1 to-zone zone 2]
'policy Ipolicy 1'
warning: Destination address or address_set (x.x.x.x/x) not found. Please check if it is a SecProfiling Feed.

configuration check succeeds


node0:
commit complete
node1:
commit complete

Symptoms

 warning: Source address or address_set (x.x.x.x/x) not found. Please check if it is a SecProfiling Feed.

Solution

SRX will commit the changes regardless of the warning, when using address-book/set instead of ip address, the SRX will not check if there's an ip address mapped with the address-book/set or not.

Will use the address-book/set as source and destination.

Modification History

2024-10-07 : Article Created