There is a full feature open source project called Oxidized which will pull backups and keep a Git source change repository for each device so you can see the changes. https://github.com/ytti/oxidized Blog on a quick start for Oxidized. https://blog.jasons.org/tag/junos/ Another ...

Thank you :)

I don't think it's worth it just for this. If you find yourself in situations like this often, then you could consider setting up an internal Certificate Authority. Otherwise, it's just another thing to worry about and maintain. ------------------------------ Nikolay Semov ---------------------- ...

We do not, is that hard to setup? In your opinion, would it be worth it?

If you have an established internal certificate authority, you should get a sub-CA certificate issued for the SRX. In the absence of that, yes, you need to make computers trust the SRX self-signed MITM certificate. If you are in a Windows domain environment, you can do that with a group policy. ------------------------------ ...

Hmm, okay so the only way to do this is with a self-signed cert, and then upload it to each computer? I just want to confirm.

You're essentially looking for your SRX to act as a publicly-trusted sub-CA, with ability to issue a certificate for any website. Unless you're operating at the scale of a nation state, I don't believe you're likely to be able to get the necessary certificate to do this. ------------------------------ ...