«

[moayad]

I have Juniper SRX 210 with the followoing settinmg
I have 4 security Zone
1-SQL “in interface ge/0/0/0” “172.32.232.1/24”
2-DMZ (for web server) “in interface ge0/0/1” “172.32.132.3/24”
3-Management
4-INTERNET
SQL IP 172.32.232.2/32
Eventwatch 172.32.132.3/32
I have set up the security policy from-zone DMZ to-zone SQL
As follwing
policies {
from-zone DMZ to-zone SQL {
policy PEWTOSQL {
match source-address ewentwatchserver;
destination-address SQLSERVER;
application sql-server;
}
then {
permit;
}
}
policy DDSTOSQL {
match {
source-address DDSSERVER;
destination-address SQLSERVER;
application sql-server;
}
then {
permit;
}
}

application sql-server {
protocol tcp;
destination-port 1433;
}
}



I cant communcate with these 2 Zones(SQL and DMZ)why??is there any extra configureation?