Hi,
We have upgaded to 9.5 from 8.1, since performing this we cannot get connections from our citrix clients remotely through an MPLS to connect to our hosts. Previously it was just required to add static routes so that internal servers would use the next hop through another router here (in the event of failover) but now unless we add static routes to our servers the clients will not connect. All branches use an MPLS connection to the juniper j2320, that in turn uses BGP to advertise routes back, we add a static route for each site in the event of failover so the client comes in through the mpls, across the untrust to trust zone, into the system and then back to the juniper j2320, picks up the static route and then back out the trust interface across to another router then back to the site... I know that with this version their is a zone based firewall so not sure if it`s that or if i have the route options set incorrectly, i`m presuming this is a zone issue but posting in routes first.
Cheers,