Navigation  Back up to About Overview 
  
[+] Expand All
[-] Collapse All

New and Changed Features

This section describes the new features and enhancements to existing features in Junos OS Release 15.1X49-D90 for the SRX Series devices.

Release 15.1X49-D90 Software Features

Flow-based and Packet-based Processing

  • Pre-fragmentation and post-fragmentation counters for SRX Series devices—Starting in Junos OS Release 15.1X49-D90, packet fragmentation counters for IPsec tunnels are implemented to help you achieve optimum SRX Series performance. You can use the statistics made available by these counters to inform the procedures that you use to tune your system to avoid packet fragmentation. You can use the show security flow session tunnel extensive, show security flow session tunnel summary, and show security flow statistics commands to view fragmentation statistics information.

    [See Understanding the Fragmentation Counters Feature and Its Benefits]

User Access and Authentication

  • Ensured captive portal for unauthenticated users who use HTTP/HTTPS browsers for SRX Series devices—Starting in Junos OS Release 15.1X49-D90, you can ensure that an unauthenticated user who issues an access request using an HTTP/HTTPS browser is presented with a captive portal interface to allow them to authenticate. It can happen that non-browser HTTP/HTTPS services running in the background at the same time can trigger captive portal authentication creating a race condition that suppresses presentation of the captive portal interface to the browser user. You specify the auth-only-browser parameter for firewall-authentication in security policies to direct it to ignore non-browser HTTP/HTTPS requests. You can also configure the auth-user-agent parameter to direct firewall authentication to check the User-Agent field in the browser header for information identifying content, such as Opera.

    [See Understanding How to Ensure That Firewall Authentication Provides Captive Portal Authentication to HTTPS/HTTP Browser Traffic]

Modified: 2017-11-28