What problem does it solve? Juniper SRX configurations are dense, hierarchical, and error-prone to interpret by hand, and generic AI agents often produce plausible but wrong readings of zones, policies, and NAT. This Skill converts display-set or curly-brace Junos configs into a structured, vendor-neutral JSON schema so audits, conversions, and diffs rest on verified extraction rather than guesswork. ## Core Features & Use Cases - Full config extraction: Parses zones, address books, address-sets, applications, security policies, NAT rules, interfaces, routing (static, BGP, OSPF/OSPFv3), VPN IKE/IPsec chains, chassis cluster HA, DHCP, syslog, and logical-systems/tenants. - Built-in audit checks: Detects unused objects, shadowed policies, overly permissive rules, missing logging, disabled policies, duplicate objects, empty groups, and weak VPN algorithms (DES/3DES, MD5, DH group ≤ 5). - Quality gates and safety: Preserves rule ordering, disabled state, and residuals; masks pre-shared keys and credentials; flags unresolved references and assumptions in metadata warnings. - Use Case: Paste an SRX show configuration | display set export and receive normalized JSON conforming to the shared intermediate schema, ready to feed firewall-config-conversion, firewall-config-diff, or a compliance audit. ## Quick Start Ask the agent to parse the attached Juniper SRX configuration into the shared firewall schema and report any unused objects or shadowed policies.
