6.3.0r10 Release Notes - Juniper Networks

More documents

Recommendations

Info

ScreenOS 6.3.0 Release Notes 6 Known Issues from ScreenOS 6.3.0r2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Antivirus (AV) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 General Packet Radio Service (GPRS) . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Intrusion Detection and Prevention (IDP) . . . . . . . . . . . . . . . . . . . . . . . . . 62 Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Network Address Translation (NAT) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Other . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Virtual Private Network (VPN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Known Issues from ScreenOS 6.3.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 General Packet Radio Service (GPRS) . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Intrusion Detection and Prevention (IDP) . . . . . . . . . . . . . . . . . . . . . . . . 64 Other . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Voice-over-Internet Protocol (VoIP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Virtual Private Network (VPN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Errata . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Concepts & Examples ScreenOS Reference Guide . . . . . . . . . . . . . . . . . . . . . 66 ScreenOS CLI Reference Guide: Command Descriptions . . . . . . . . . . . . . . . . 71 ScreenOS Online Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 ScreenOS Upgrade Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Limitations and Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Limitations of Features in ScreenOS 6.3.0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Documentation Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Getting Help for ScreenOS 6.3.0 Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76 Copyright © 2012, Juniper Networks, Inc.
Version Summary ScreenOS 6.3.0 firmware can be installed on the following products: Secure Services Gateway (SSG) 5, SSG 20, SSG 140, SSG 320M/350M, SSG 520/520M, SSG 550/550M, Integrated Services Gateway (ISG) 1000, ISG 1000-IDP, ISG 2000, ISG 2000-IDP, and NetScreen-5000 series with the NS 5000-MGT2/SPM2 and NS 5000-MGT3/SPM3. This release incorporates bug fixes from ScreenOS maintenance releases up to 6.3.0r9, 6.3.0r7, 6.3.0r6, 6.3.0r5, 6.3.0r4, 6.2.0r12, 6.1.0r7, 6.0.0r8, and 5.4.0r23. NOTE: New Features and Enhancements • If you are using an SSG 500-series device and an SSG 500M-series device in a NetScreen Redundancy Protocol (NSRP) environment, all devices must be running ScreenOS 6.0.0r1 or later. • NSRP clusters require the use of the same hardware products within a cluster. Do not mix different product models in NSRP deployments. The exception to this rule is SSG 500-series and 500M-series devices, which can be used together in a cluster. The following sections describe new features and enhancements available in the ScreenOS 6.3.0 release. NOTE: You must register your product at http://support.juniper.net to activate licensed features such as antivirus (AV), deep inspection (DI), and virtual systems (vsys) on the device. To register your product, you need the model and serial numbers of the device. At the support page: • If you already have an account, enter your user ID and password. • If you are a new Juniper Networks customer, first create an account, then enter your ID and password. After registering your product, confirm that your device has Internet connectivity. Use the exec license-key update all command to connect the device to the Juniper Networks server and activate your desired features. New Software Features and Enhancements Introduced in 6.3.0 The following sections describe the new features introduced in the ScreenOS 6.3.0 release. Copyright © 2012, Juniper Networks, Inc. Version Summary 7
Page 1 and 2: Juniper Networks ScreenOS Release N
Page 3 and 4: Copyright © 2012, Juniper Networks
Page 5: Copyright © 2012, Juniper Networks
Page 9 and 10: associated with the IP address. If
Page 15 and 16: Example 2: nsisg2000-> get system B
Page 17 and 18: Changes to Default Behavior Virtual
Page 19 and 20: Detector and Attack Objects Update
Page 21 and 22: • 674736—GTP IDreq packets are
Page 23 and 24: • 575680—SNMP walk on 10-gig in
Page 25 and 26: Addressed Issues from ScreenOS 6.3.
Page 27 and 28: • 582678— Creating admin user w
Page 29 and 30: • 570628—Debug messages were di
Page 31 and 32: IDP • 536048—Repeated pushing o
Page 33 and 34: • 533635—Route-based VPN failov
Page 35 and 36: • 503307—Application-Specific I
Page 37 and 38: • 513071—With application ident
Page 39 and 40: Performance • 494910—[SSG 140]
Page 41 and 42: • 456358—The common flags GTP I
Page 43 and 44: • 484169—Firewall might reboot
Page 45 and 46: • 474665—In vsys, for IKE gatew
Page 47 and 48: Network Address Translation (NAT)
Page 49 and 50: WebUI • 455462—Using the WebUI,
Page 53 and 54: Network Address Translation (NAT)
Page 55 and 56: Voice-over-Internet Protocol (VoIP)
Page 57 and 58:
VPN Known Issues from ScreenOS 6.3.
Page 59 and 60:
VoIP • 585139— Sometimes device
Page 61 and 62:
WebUI Known Issues from ScreenOS 6.
Page 63 and 64:
• 481096—Enabling set log audit
Page 65 and 66:
Errata Routing • 430289—On cert
Page 67 and 68:
Copyright © 2012, Juniper Networks
Page 69 and 70:
To configure the examples, make the
Page 71 and 72:
set interface lo.3 mip 7.7.7.7 host
Page 73 and 74:
Copyright © 2012, Juniper Networks
Page 75 and 76:
• UDP and ICMP Flood Screening—
show all

6.3.0r10 Release Notes - Juniper Networks

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?