Juniper Advanced Threat Prevention Cloud (ATP Cloud)

Support to delete a single country code from GeoIP-based dynamic addresses (SRX1500,SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX3.0)—Starting in Junos OS Release 23.2R1, you can delete a single country code from an IP-based geolocation (GeoIP)–Dynamic Address Entry (DAE) configuration.

In previous releases, when you delete a single country code from a GeoIP DAE, the SRX Series Firewall deletes all the country names, and then adds them back except the country code that you deleted. Now, you can use the same command to delete the country code. The SRX Series Firewall deletes the IP ranges related to the given country code only, without affecting the IP ranges of other countries.

We've also updated the show security dynamic-address command to display the country code appended to the IP-based geolocation name.

See [Configuring Juniper Advanced Threat Prevention Cloud With Geolocation IP].