Title: NetScreen Security Alert 56305

Date: 06 March 2003

Impact: Potential loss of configuration

Affected Products: NetScreen 5XP / 5XT running ScreenOS 4.0.0 or later

Max Risk: High

Summary:

Several customers have reported occasions where their NetScreen-5XP and/or NetScreen-5XT running ScreenOS 4.0.0 or later apparently loses the device configuration and is restored to the factory defaults.

NetScreen has confirmed that NetScreen-5XP and -5XT Firewall/VPN devices exhibit this behavior under very specific circumstances. While under heavy load, in rare occasions the device will revert to factory settings. The factory settings will NAT all traffic on the trust interface to the untrust interface, and all incoming traffic will be rejected. Due to the device no longer having a default route, hosts on the trust interface will not be able to access external networks.

Recommended Actions:

(1)     Immediately upgrade to one of the maintenance releases indicated below

Maintenance Releases Addressing This Issue:
4.0.0
4.0.0-DIAL
4.0.1
4.0.2
NetScreen-5XP
r11
r4
r3
NetScreen-5XT
r11
r3
r4
r3

If you have a release of ScreenOS not addressed by the maintenance releases above, please contact support@netscreen.com.

How to Get ScreenOS:

If you have registered your product with NetScreen and have a valid service contract, you can simply download the software from:
http://www.juniper.net/support/nscn_support/tao/

You will be prompted for your User ID and Password. Enter the whole or part of your company name as your User ID and enter your registered NetScreen device serial number as the password.

If you have not yet registered your product with NetScreen, you will need to contact NetScreen Technical Support for special instructions on how to obtain the fixed software. NetScreen Technical Support can be reached from 8 a.m. to 5 p.m. pacific time, Monday through Friday, excluding weekends and observed holidays.
You may contact them via email at: support@netscreen.com or via phone at: 408.730.6000 or 800.638.8296

Please reference this Advisory title as evidence of your entitlement to the fixed software version.

NetScreen authorized channel partners have access to NetScreen software versions and may also be a channel through which to obtain the new release.