Juniper has a plugin for Firefox that can be used for easy search of their knowledge base articles.
Go to http://kb.juniper.net and click on ‘Install Search Engine PlugIn’
To find the REALM for configuring Kerberos authentication, run the following DOS command on your domain controller and hit enter
set USERDNSDOMAIN
ThIS output is needed when configuring Cisco ASA firewalls clients for Kerberos authentication
ASA CLI configuration example:
aaa-server KerberosGroup protocol kerberos
aaa-server KerberosGroup (inside) host 192.1.1.100
kerberos-realm XYZ.MYDOMAIN.COM
If you have been a long time Netscreen user and are thinking about upgrading to Juniper SRX, beware of the HA configuration complexity with JunOS, it is very unique and is a real challenge to master. You will definitely wish Juniper would have left it the way it was in Netscreen.
for details Ref. Juniper Knowledge base article
By default failover in ASA HA firewalls will occur in
- 15 secs if the active firewall goes down.
- 25 secs if an interface on active firewall is flapping
- 5 secs if an interface on the firewall goes down
- 2 secs if a module on the active firewall goes down.
Use the failover polltime command on the active firewall to change from the default values.