Known Limitations

Learn about known limitations in Junos OS Release 21.4R3 for SRX Series Gateways.

For the most complete and latest information about known Junos OS defects, use the Juniper Networks online Junos Problem Report Search application.

J-Web

The Firefox browser displays an unsaved changes error message in the J-Web Basic Settings page if the Autofill logins and passwords option is selected under the Browser Privacy and security settings. PR1560549

For upgrades to Junos OS version 21.2 or higher from Junos OS versions below 21.2, the no-validate option needs to be used in the request system software upgrade or the request system software in-service-upgrade (ISSU) command. Note: This does not apply to SRX300 series and SRX550HM devices.

For the case of ISSU however, the no-validate option does not take effect and you need to use the hidden no-compatibility-check option instead as a workaround to be able to use ISSU to Junos 21.2 or higher successfully. This issue was fixed in Junos releases 20.3R3-S5, 20.4R3-S4, 21.1R3-S3 and higher releases. PR1590099 and PR1638499
USB image upgrade for RE-1800x4 K2re "bare-metal" platforms (SRX5000 line of devices, MX240, MX480, MX960, MX2010, EX9208 chassis) might not be successful. PR1630040
On SRX4600 platform, the CPU may overrun while performing sanity check due to incompatibility issues between ukern scheduler and Linux driver which might lead to traffic loss.PR1641517
On SRX platforms, when performing ISSU to Junos OS release 22.1 or above releases from a pre-22.1 release, ISSU will be aborted with the warning message "ISSU is not supported for Clock Synchronization (SyncE)". As a workaround use the hidden no-compatibility-check option in the ISSU command. This issue is resolved in 21.3R3, 21.4R2, 21.4R3 and higher releases. PR1652838

In some scenario(e.g configuring firewall filter) sometimes srx5K might show obsolete IPsec SA and NHTB entry even when the peer tear down the tunnel. PR1432925