View system-related restrictions on Juniper SRX series firewalls (maximum number of Policy policies, maximum number of NAT, etc.)

View system-related restrictions on Juniper SRX series firewalls (maximum number of Policy policies, maximum number of NAT, etc.)

You can view the system-related restrictions of Juniper SRX series firewalls through show log nsd_chk_only | no-more.

For example, the maximum number of Policy policies, the maximum number of policy calls Address address book, the maximum number of policy calls Applications applications, the maximum number of NAT, the maximum number of Zone areas and other related information.

The following is the Juniper SRX5600 output

SRX5600 > show log nsd_chk_only | no-more

Matching platform:

Model Name = srx5600

Hardware Model = srx5600

Description = australia

Policy Capacity Config:

Max Policy = 80000

Max Policy Context = 8192

Max Policy per Context = 10240

Max Statistics Counter = 1024

Max Address per Policy = 1024

Max Applications per Policy = 128,

Scheduler Capacity Config:

Max Scheduler = 64

Zones Capacity Config:

Max Security Zones = 2000

NAT rule Capacity Config:

Source NAT rule number = 8192

Dest NAT rule number = 8192

Static NAT rule number = 8192

Ds-lite SC number = 32

Source NAT rule-set number = 8192

Dest NAT rule-set number = 8192

Static NAT rule-set number = 8192