Limitations of Flow and Processing

On an SRX Series or a J Series device, when defining flow and processing, be aware of the following limitations:

• On SRX3400, SRX3600, SRX5600, and SRX5800 devices, downgrading is not supported in low-impact in-service software upgrade (ISSU) chassis cluster upgrades (LICU).
• On SRX5800 devices, network processing bundling is not supported in Layer 2 transparent mode.
• On SRX210, SRX240, and J Series devices, broadcast TFTP is not supported when flow is enabled on the device.
• Maximum concurrent SSH, Telnet, and Web sessions—On SRX210, SRX240, and SRX650 devices, the maximum number of concurrent sessions is as follows:

  Sessions	SRX210	SRX240	SRX650
  ssh	3	5	5
  telnet	3	5	5
  Web	3	5	5

  Note: These defaults are provided for performance reasons.

• On SRX210 and SRX240 devices, for optimized efficiency, we recommend that you limit use of CLI and J-Web to the following numbers of sessions:

  Device	CLI	J-Web	Console
  SRX210	3	3	1
  SRX240	5	5	1

• On SRX100 devices, Layer 3 control protocols (OSPF, using multicast destination MAC address) on the VLAN Layer 3 interface work only with access ports.