Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Open Issues

Learn about open issues in this release for SRX Series devices.

For the most complete and latest information about known Junos OS defects, use the Juniper Networks online Junos Problem Report Search application.

Flow-Based and Packet-Based Processing

  • For accelerated flows such as Express Path, the packet or byte counters in the session close log and show session output take into account only the values that accumulated while traversing the NP. PR1546430

  • FTPS connection to the server will not be successful until the first attempt is aborted and a new connection to the server is made. PR1715918

General Routing

  • IPsec rekey fails when SRX is configured with kilobyte based lifetime in remote access solution. PR1527384

  • With ssl-proxy configured along with web-proxy, the client session might not get closed on the device until session timeout, even though the proxy session ends gracefully.PR1580526

  • All VPN traffic may internally drop during encryption / decryption processing in HW engine requiring PFE plane reset. PR1630981

  • SRX550HM interfaces LED of ge-0/0/6-9 will auto turn off after device bootup some minutes.PR1634965

  • Device does not drop session with server certificate chain more than 6.PR1663062

  • FIPS mode is not supported in this release for SRXSME devices.PR1697999

  • On SRX380, the Autonegotiation status on the 1G/10G ports may be incorrectly displayed as "Incomplete". This has no impact to traffic.PR1703002

  • On SRX platforms, log streaming to the security director cloud fails on TLS(Transport Layer Security) when DNS(Domain Name System) re-query is performed.PR1708116

  • On Junos SRX4600 platform running with an image with Glacis FPGA (Field Programmable Gate Array) v1.5d, ping is failing from a remote host to one of the SRX4600's WAN interface after updating to an image with Glacis FPGA v1.63.PR1712167

Layer 2 Ethernet Services

  • If a client sends a DHCP request packet, and option 55 includes PAD option (0), a DHCP ACK will not be sent back to the client. PR1201413

User Interface and Configuration

  • On all Junos and Junos Evolved platforms configured with persist-group-inheritance, which is enabled by default from 19.4R3 onwards, might lead to mustd process crash in highly scaled configuration.PR1638847


  • First time when we add this command the existing active connections are not changed, only the new connection after this command will be taken into effect. PR1608715