Upgrades for SRX Series Firewalls
Learn how to upgrade Junos OS on SRX Series Firewalls with Juniper Networks, covering preparation, software download, verification, execution, and troubleshooting for a smooth transition and minimal downtime.
SRX Series Firewalls are delivered with Junos OS pre-installed on them. When you power on a device, it starts (boots) up using its primary boot device. These devices also support secondary boot devices, enabling you to back up your primary boot device and configuration.
On an SRX Series Firewalls, you can configure the primary and secondary boot device each with a snapshot of the current configuration, the default factory configuration, or a rescue configuration. You can also replicate the configuration from one device to the other device on a firewall.
Your primary boot device may get corrupted and your firewall device may not have a secondary boot device configured. To resolve this issue, reload the Junos OS package onto the corrupted storage device from a USB flash drive or a Trivial File Transfer Protocol (TFTP) server.
As new features and software fixes become available, you must upgrade Junos OS to use them. Before an upgrade, ensure that you back up your primary boot device.
Junos OS Upgrade Methods on SRX Series Firewalls
Certain Junos OS upgrade methods format the device before installation, whereas other methods do not. To install Junos OS with dual-root partitioning, you must use an upgrade method that formats the device before installation.
| Upgrade Methods | Media-Formatting Behavior |
|---|---|
| Installation from the boot loader using a TFTP server | Formats device before installation |
| Installation from the boot loader using a USB storage device | Formats device before installation |
| Installation using the J-Web UI |
|
| Installation using the CLI | Retains existing partitioning |
After an upgrade that formats the device with dual-root partitioning, you can use the conventional CLI or J-Web UI installation methods for subsequent upgrades.