Authentication and Access Control | Junos OS

Unified policy support for firewall user authentication (SRX Series and vSRX)—Starting in Junos OS Release 21.2R1, we support firewall user authentication in a security policy with dynamic applications (unified policy). You can configure pass-through or web authentication in the unified policy to restrict or permit users to access network resources.

Firewall user authentication support in the unified policy provides an additional layer of protection in a network with dynamic traffic changes.

[See Configure Firewall User Authentication with Unified Policies.]

Display dynamic-applications and URL category hit counts in a security policy (NFX Series and SRX Series)—Starting in Junos OS Release 21.2R1, we've enhanced the show security policies hit-count command to include the dynamic applications and URL categories options. You can now display the utility rate of the policy according to the number of hits for the dynamic applications and URL categories.

[See show security policies hit-count.]

802.1X authentication on trunk ports (MX Series)—Starting with Junos OS Release 21.2R1, you can enable 802.1X authentication on trunk ports. We support authentication on the trunk port only in single supplicant and single-secure supplicant modes.

[See 802.1X Authentication on Trunk Ports.]

Support to configure boot order (SRX1500 and SRX4600)—Starting in Junos OS Release 21.2R1, you can choose to reboot your security devices from a USB device without power cycling. Use the request system reboot usb configuration statement to reboot your device from USB. This statement allows your security devices to detect a new USB device with a soft reboot.

[See request system reboot usb (SRX Series).]