An engineer needs to troubleshoot asymmetric routing issues where return traffic bypasses the SRX firewall. Which flow option can be enabled to handle asymmetric paths?
Trap 1: set security flow asymmetric-routing permit
This command does not exist in standard Junos syntax.
Trap 2: set routing-options instance-type virtual-router
Virtual routers isolate routing tables rather than modifying firewall session establishment behavior.
Trap 3: set security policies bypass-reverse-path
Security policies do not contain a bypass-reverse-path parameter.
- A
set security flow asymmetric-routing permit
Why wrong: This command does not exist in standard Junos syntax.
- B
set routing-options instance-type virtual-router
Why wrong: Virtual routers isolate routing tables rather than modifying firewall session establishment behavior.
- C
set security policies bypass-reverse-path
Why wrong: Security policies do not contain a bypass-reverse-path parameter.
- D
set security flow tcp-session no-syn-check
Correct. Disabling the SYN check allows the SRX to create sessions when encountering asymmetric routing where the initial SYN was missed.