Open Issues

Learn about open issues in Junos OS Release 22.2R1 for SRX Series devices.

For the most complete and latest information about known Junos OS defects, use the Juniper Networks online Junos Problem Report Search application.

Chassis Clustering

10GbE DAC cable is not supported at CTL or FAB link at SRX4100 and SRX4200 chassis cluster setup. PR1636365

ISSU will be aborted or failed with the warning. 'warn-message "ISSU is not supported for Clock Synchronization (SyncE)";''override'In '/var/tmp/paSBfY/etc/indb//config.indb' line 162included from '/var/tmp/paSBfY/etc/indb/issu.indb' line 10 'override' syntax errorISSU not supported as current image uses explicit tags for message structures. PR1628172

Traffic drop might be seen on irb interface on SRX1500 for network control forwarding class when verifying DSCP classification based on single and multiple code-points. PR1611623

With SSL proxy configured along with Web proxy, the client session might not closed on the device even though proxy session ends gracefully. PR1580526
HA active/passive mode on-box logging in logical systems and tenant systems, the intermittently security log contents of binary log file in logical systems and tenant systems are not as expected. PR1587360
On SRX1500 devices, ISSU is getting aborted with ISSU is not supported for Clock Synchronization (SyncE). PR1632810
SMTPS sessions are not getting identified when traffic is sent from IXIA (BPS) profile. PR1635929
The remote access Juniper Networks standard license might not get freed up while disconnect or reconnect after RG0 failover. PR1642653
Firewall authentication with user firewall based RADIUS access has syslog missing the username and rule. PR1654842

If only EWF is configured, there can be a performance impact due to JDPI parsing overhead. In such case, to recover the performance, Web Filter can be configured in performance mode using the set security utm default-configuration web-filtering performance-mode. PR1653793

Use load update instead of load override to prevent the error messages. PR1630315

On SRX5400, SRX5600, and SRX5800 devices, during in-service software upgrade (ISSU), the IPsec tunnels flap, causing a disruption of traffic. The IPsec tunnels recover automatically after the ISSU process is completed. PR1416334
On SRX5000 line of devices, in some scenario, the device output might display obsolete IPsec SA and NHTB entry even when the peer tear down the tunnel. PR1432925
Tunnel debugging configuration is not synchronized to the backup node. It needs to be configured again after RG0 failover. PR1450393