Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Flow-Based and Packet-Based Processing

  • Support for IPv6 tunnel (SRX Series and vSRX 3.0)— Starting in Junos OS Release 22.2R1, you can encapsulate IPv4 and IPv6 traffic over the IPv6 network.

    The IPv6 tunnel helps IPv4 traffic traverse over the IPv6 network. You can use IPv6 tunneling in various features such as policy routing and preferential billing. For example, a set-top box that supports only IPv4 traffic can traverse the server over an IPv6 network.

    [See show security flow session.]

  • NP-cache scale-up (SRX4600)—Starting in Junos OS Release 22.2R1, the NP-cache wing count is 20 million. With this increment, the number of Express Path sessions increase fourfold.

    [See Sessions per Wing Statistics.]

  • Bypass IP block fragmentation check with allowlist configuration (SRX300, SRX320, SRX340, SRX345, SRX380, SRX1500, SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX)—Starting in Junos OS Release 22.2R1, you can configure an allowlist for an IP block fragment screen. The traffic from source addresses in the allowlist groups bypasses the IP block fragmentation check. The IP block fragment allowlist supports both IPv4 and IPv6 addresses and a maximum of 32 allowlist groups.

    [See ids.option and Understanding Allowlists for IP Block Fragment Screen.]