Whats wrong with youtubers ? .<| sep |> metric fuck tonne 2 <| sep |> in response to numbers 1 . did you give it a default route in the web setup ? do you have a default route to internet on SRX ? 2 . you do not really want to allow traffic from internet to internal zone , srx runs as a stateful firewall so what it lets out from internal it will allow back in , you will want to set up some basic state firewall rules to allow ssh ext from the outside in . 3 . again , this may relate to number 1 . do you have a default route to internet on SRX ? now asides from these terse recommendations , the advice that will benefit you most , is that , the greatest resource in mastering the SRX , is time . slowly and thoroughly work through a good manual . i mainly used the jcnissec vol 1 . fast track cert book and , actually , it was quite bad , and i know about stateful firewalls asaopenbsd so that is quite poor , but if you can get a copy it is worth reading , it will just take more time . i also used the Oreilly book , which is good , but requres more time . finally if you break it down into steps it 1 . internet connectivity from srx , this will require a static default route 2 . set up vlans 3 . zone rules to allow static clients on vlan to internet int . ext , athis will also include NAT 4 . then try with dhcp 5 . then ACL or rules to allow some service in ext intmake sure you spend the time because a poorly configured firewall may no firewall at all