I am very happy that Network Objects came out ahead of IPV6.  Using IPV6 addresses instead of objects would render firewall rules almost impossible to manage! ... View more

Sorry to revive this old thread, but does anyone have a clear understanding or link to explain the sizing limitations?  Example- a client has an MX250, but just a 100Mbps WAN connection. They would be fine with the small license?   The data sheet has recommendations, but I want to understand what would be the pros/cons of the previous example.   Thanks ... View more

You could disable all unused ports so they can't use them, and then enable and configure them as requested. ... View more

Hi, as much as i understood from this article earlier, and my working on MX since i had an answer. it will not work. To have a L3 Switch with Vlan interfaces configured on, and to have the MX unit after this switch. this setting will lead you to the problem of having to configure the clients manually to the desired group you need these clients to be a member of. if you have the same scenario that i had earlier. that i had a guests vlan, and wanted to make sure that the any one connected to the Guests vlan to automatically been assigned to the Guests group. then i removed the VLAN interface from the L3 switch and passed the Guests VLAN to the MX -after i created the same VLAN on the MX Unit- and configured the VLAN interface on the MX unit. also applied DHCP from MX to this VLAN. then it was solved. so the Staff VLANs were kept on the L3 switch, and the Guests VLAN interface was moved to the MX unit rather that the L3 Switch. Kind Regards ... View more

If you are not willing to block port 25 or filter SMTP traffic for your guests, then no, the MX does not do what you're looking for.  ... View more

Hi Philip, loud and clear. many thanks ... View more