Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

ON THIS PAGE

Junos OS Release Notes for cSRX

 

These release notes accompany Junos OS Release 20.4R3 for the cSRX Container Firewall, a containerized version of the SRX Series Services Gateway. They describe new and changed features, limitations, and known and resolved problems in the hardware and software.

You can also find these release notes on the Juniper Networks Junos OS Documentation webpage, located at https://www.juniper.net/documentation/product/en_US/junos-os.

What’s New

What's New in Release 20.4R3

There are no new features in Junos OS Release 20.4R3 for cSRX.

What's New in Release 20.4R2

There are no new features in Junos OS Release 20.4R2 for cSRX.

What's New in Release 20.4R1

There are no new features in Junos OS Release 20.4R1 for cSRX.

What's Changed

Learn about what changed in the Junos OS main and maintenance releases for cSRX.

What’s Changed in Release 20.4R3

There are no changes in behavior or syntax for cSRX in Junos OS Release 20.4R3.

What’s Changed in Release 20.4R2

There are no changes in behavior or syntax for cSRX in Junos OS Release 20.4R2.

What’s Changed in Release 20.4R1

Platform and Infrastructure

  • Downloading of Signature Pack You can download the signature pack from the Signature Pack directly when the cSRX doesn’t have pre-installed signature pack.

    • Configure proxy server so that IP address of proxy server is reachable from cSRX.

    • Run the following command to enter the configurational mode from CLI.

      root@host> configure [edit]

      root@host#

    • Configure proxy server profile on cSRX using IP address and port of proxy server.

      root@host#set services proxy profile appid_sigpack_proxy protocol http host 4.0.0.1

      root@host#set services proxy profile appid_sigpack_proxy protocol http port 3128

    • Attach the profile to AppID and IDP.

      root@host#set services application-identification download proxy-profile appid_sigpack_proxy

      root@host#set security idp security-package proxy-profile appid_sigpack_proxy

    • Commit the configuration.

      root@host#commit and-quit

      commit complete

    • Download IDP and APPID sigpack through proxy server.

      root@host>request services application-identification download

      root@host>request security idp security-package download

    • To verify if download is going through proxy server:

      Verify the logs in proxy server.

      [root@srxdpi-lnx39 squid]# cat /var/log/squid/access.log 1593697174.470 1168 4.0.0.254 TCP_TUNNEL/200 5994 CONNECT signatures.juniper.net:443 - HIER_DIRECT/66.129.242.156 - 1593697175.704 1225 4.0.0.254 TCP_TUNNEL/200 11125 CONNECT signatures.juniper.net:443 - HIER_DIRECT/66.129.242.156 - 1593697176.950 1232 4.0.0.254 TCP_TUNNEL/200 5978 CONNECT signatures.juniper.net:443 - HIER_DIRECT/66.129.242.156 - 1593697178.195 1236 4.0.0.254 TCP_TUNNEL/200 11188 CONNECT signatures.juniper.net:443 - HIER_DIRECT/66.129.242.156 - 1593697198.337 1243 4.0.0.254 TCP_TUNNEL/200 6125 CONNECT signatures.juniper.net:443 - HIER_DIRECT/66.129.242.156 -

      In cSRX, TLS protocol is used and traffic through proxy is encrypted.

Known Limitations

There are no known behavior for cSRX in Junos OS Release 20.4R3.

Open Issues

There are no open issues for cSRX in Junos OS Release 20.4R3.

Resolved Issues

Resolved Issues: 20.4R3

There are no resolved issues for cSRX in Junos OS Release 20.4R3.

Resolved Issues: 20.4R2

There are no resolved issues for cSRX in Junos OS Release 20.4R2.

Resolved Issues: 20.4R1

There are no resolved issues for cSRX in Junos OS Release 20.4R1.