What’s Changed in Release 21.4R2

Network Management and Monitoring

• Changes when deactivating or deleting instances of the ephemeral configuration database (ACX Series, EX Series, MX Series, PTX Series, QFX Series, SRX Series, vMX, and vSRX)—The following changes apply when you deactivate or delete ephemeral database instances in the static configuration database:

  • When you deactivate the entire [edit system configuration-database ephemeral] hierarchy level, the device deletes the files and corresponding configuration data for all user-defined ephemeral instances. In earlier releases, the files and configuration data are preserved; however, the configuration data is not merged with the static configuration database.
  • When you delete an ephemeral instance in the static configuration database, the instance's configuration files are also deleted. In earlier releases, the configuration files are preserved.
  • You can delete the files and corresponding configuration data for the default ephemeral database instance by configuring the delete-ephemeral-default statement in conjunction with the ignore-ephemeral-default statement at the [edit system configuration-database ephemeral] hierarchy level.

  [See Enable and Configure Instances of the Ephemeral Configuration Database.]

Platform and Infrastructure

Instance Types on AWS platform (vSRX and vSRX 3.0)—Starting with Junos OS release 21.4R2, only C5 instance types are supported on AWS platform. C4 instance type with vSRX is deprecated. If you wish to upgrade the Junos OS on a C4 vSRX instance, then you must deploy a new vSRX instance using the supported instance types. See Interface Mapping for vSRX on AWS.

Unified Threat Management (UTM)

• Content filtering CLI updates (SRX Series and vSRX)—We've the following updates to the content filtering CLI:

  • Trimmed the list of file types supported for content filtering rule match criteria. Instead of uniquely representing different variants of a file type, now only one file-type string represents all variants. Hence, the show security utm content-filtering statistics output is also updated to align with the new file types available in the rule match criteria.
  • Renamed the content filtering security logging option seclog to log to match with the Junos OS configuration standard.
  • Rephrased the reason string associated with content filtering security log message.

  [See content-filtering (Security UTM Policy), content-filtering (Security Feature Profile), and show security utm content-filtering statistics.]