6.3.0r10 Release Notes - Juniper Networks

ScreenOS 6.3.0 Release Notes
34
DHCP
• 510653—Unable to configure DHCP option string with a length greater than 128 bytes.
DI
• 528641—Under certain conditions, after DI attack signature update, the configured
"action" in attack policies became incorrect.
HA & NSRP
• 509803—Software sessions on backup firewall did not ageout properly because of
its inability to synchronize time with its master unit.
• 519838—Both firewalls in NSRP cluster sometimes became master.
IDP
• 522728—Under certain conditions, the traffic dropped because the inline-tap mode
was changed to inline mode.
Management
• 505106—Under certain conditions, the policies were marked as "invalid" because of
NSM policy push operation.
• 520991—After reboot, the unset http skipmime mime-list command was added to the
configuration.
• 522075—TCP sweep and UDP sweep screen options could not be configured using
NSM because these options were missing in the ScreenOS config datafile.
• 522349—Signatures with 30 or more characters were truncated when passed through
the syslog output.
• 524380—The ifOperStatus reports wrong value in the NSRP passive cluster member.
• 526797—When DNS response was fragmented, the reason for session close in the
traffic log became ageout.
• 529788—NSM view statistics sometimes caused the device to reboot unexpectedly
with dump.
NAT
• 512224—MIP translation between IPv6 addresses failed to translate.
Other
• 478573—[SSG300] The device sent corrupted IP packets on reboot.
• 483101—The Elliptical Curve Diffie-Hellman (ECDH) IKE implementation populated
both group type and description in the Payload, and caused interoperability issue with
third party VPN devices.
Copyright © 2012, Juniper Networks, Inc.