J-Web | Junos OS | Juniper Networks

Support for EX4400-EM-1C uplink module (EX Series)—Starting in Junos OS Release 23.2R1, J-Web supports EX4400-EM-1C uplink module (100GbE QSFP28 extension module) for EX4400 and EX4400-24X switches. This module supports Media Access Control Security (MACsec) with AES-256 bit encryption.

[See Dashboard for EX Series Switches, Connecting and Configuring an EX Series Switch (J-Web Procedure), and Configuring a Virtual Chassis on an EX Series Switch (J-Web Procedure).]

Support for allowed groups in LDAP (SRX1500, SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX3.0)—Starting in Junos OS Release 23.2R1, J-Web supports Allowed Groups under the LDAP option in this navigation path: Security Services > Firewall Authentication > Access Profile > Create Access Profile. You can now configure groups that are allowed to sign in.

[See Add an Access Profile.]

Support for LDAP (SRX1500, SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX3.0)—Starting in Junos OS Release 23.2R1, J-Web supports the LDAP option in this navigation path: Network > VPN > IPsec VPN > Create VPN > Remote Access > Juniper Secure Connect > Local Gateway. Using LDAP, you can configure user authentication for an access profile.

[See Create a Remote Access VPN—Juniper Secure Connect and Add an Access Profile.]

Support for system logs (SRX1500, SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX3.0)—Starting in Junos OS Release 23.2R1, we’ve added a new sub-menu, System, under the Monitor menu. From this sub-menu, you can navigate to monitor information about system events such as routine operations, failure and error conditions, and emergency or critical conditions.

[See Monitor System.]

Support for compliance rules (SRX1500, SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX3.0)—Starting in Junos OS Release 23.2R1:

We’ve added a new sub-menu, Compliance, under the Network menu. Use this sub-menu to create remote access pre-logon compliance policies in the SRX Series Firewall. You can associate only one compliance policy for a remote access connection profile. The Juniper Secure Connect application sends details to the SRX Series Firewall. The device performs pre-logon compliance checks and accepts or rejects a connection based on the pre-logon compliance rule match.
J-Web supports Compliance option under Network > VPN > IPsec VPN > Create VPN > Remote Access > Juniper Secure Connect > Remote User. Use this option to associate only one compliance rule for a remote access connection profile.

[See About the Compliance Page and Create a Remote Access VPN—Juniper Secure Connect.]

Support for multiple device access (SRX1500, SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX3.0)—Starting in Junos OS Release 23.2R1, you can now connect to the firewall from multiple devices at the same time. To enable multiple device user access through J-Web, navigate to Network > VPN > IPsec VPN > Create VPN > Remote Access > Juniper Secure Connect > Remote User > Multi Device Access.

For configuring multiple device user access, ensure each of the remote devices (computers or smart devices) has a unique hostname.

[See Create a Remote Access VPN—Juniper Secure Connect.]

Support for application bypass (SRX1500, SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800, and vSRX3.0)—Starting in Junos OS Release 23.2R1, J-Web supports Application Bypass available in this path: Network > VPN > IPsec VPN > Create VPN > Remote Access > Juniper Secure Connect > Remote User. You can define Juniper Secure Connect remote client configuration parameters to bypass certain applications. Bypassing is based on domain names and protocols without passing through the remote access VPN tunnel. Administrator configures these parameters on the SRX Series Firewall which are pushed to client application after successful authentication.

[See Create a Remote Access VPN—Juniper Secure Connect.]