@trunolimit What you have described isn't a DMZ issue, it is an issue with the MX not handling everything that comes down the line from your ISP. DMZ Creation using MX The simplest way to deal with this issue is to place a small configurable router/security gateway ahead of the MX, the one I use has only 3 ports which may be configured as LAN or WAN and NAT may be configured on a per port basis. This arrangement keeps the secure stuff secure. On a selective basis there are ephemeral links created to initiate activities on the insecure side of the network. There are also links between devices in the different networks, but not involving IP network protocol or USG. A display may be connected (HDMI/DP) to both networks to provide access to the functionality provided by an insecure device. It also opens up access to a great many people who have dealt with and found solutions to the problem you have described.
... View more
