February, 2026 Release
New and Changed Features: February, 2026
- Support for IPv6 dual-stack
- Offline updates for flow-based AV and ML-based threat detection
- Deprecation of RSA-SHA1 signature algorithm
Support for IPv6 dual-stack
IPv6 dual-stack (both IPv4 and IPv6) support is now enabled for SecIntel, AAMW, and certificate authority (CA) server. This support means the SRX Series Firewalls can now connect to and be managed through Juniper ATP Cloud using both IPv6 and IPv4 protocols. To ensure connectivity with IPv6 dual-stack, you must allow traffic to the junipersecurity.net domain on ports 443, 8443, and 8080.
[See Enroll an SRX Series Firewall Using Juniper ATP Cloud Web Portal and Enroll an SRX Series Firewall Using the CLI.]
Offline updates for flow-based AV and ML-based threat detection
You can now update flow-based antivirus (AV) policy and machine learning (ML)-based threat detection on your SRX Series Firewalls in offline mode. Download the signature bundle to your local server and make sure the firewall has access to these files. Configure the server URL and antivirus policy to specify actions and notifications. This update allows you to maintain up-to-date security without an active Internet connection.
[See Update Flow-Based AV and ML-Based Threat Detection in Offline Mode.]
Deprecation of RSA-SHA1 signature algorithm
The RSA-SHA1 algorithm is deprecated and no longer supported in Juniper ATP Cloud. For Single Sign-On (SSO) using Security Assertion Markup Language (SAML), both Okta and Azure provide RSA-SHA256 signature algorithm, which enhances user authentication security.
[See Set Up Single Sign-on with SAML 2.0 Identity Provider.]