Explore New Features Post Upgrade to Junos OS Release 19.4R3
SUMMARY Read this topic to know about additional features available on your security device after you upgrade and access the links to start using them quickly and easily.
Simplified Configuration
|
Feature |
If You Want to | Go to |
|---|---|---|
|
Dedicated management through the fxp0 interface (Junos OS Release 18.3R1) |
Confine the management interface to a dedicated management instance in a non-default routing instance to improve security and make it easier to troubleshoot. |
|
|
Junos telemetry interface (JTI) support for gRPC (Junos OS Release 19.2R1) |
Use gRPCs in JTI to provision sensors and subscribe to receive telemetry data on your device. |
Guidelines for gRPC and gNMI Sensors |
|
HA mode wizard (Junos OS Release 19.2R1) |
Use HA wizards to set up chassis cluster in a few steps using J-Web. |
|
| Juniper Agile Licensing (Junos OS Release 19.2R1) | Use Juniper Agile Licensing, a simplified and centralized license administration and deployment for your SRX Series. | Juniper Agile Licensing Guide |
|
Multiple IDP policy support (Junos OS Release 18.3R1) |
Have the flexibility to configure multiple IDP policies and set one of those policies as the default IDP policy on your device. |
|
|
Packet captures from operational mode (Junos OS Release 19.3R1) |
Execute the packet capture from the operational mode without committing the configurations. |
|
|
Simplified VPN Configuration in J-Web (Junos OS Release 20.2R1) |
Configure IPsec VPN in a few steps using J-Web. |
|
|
SSL certificate management enhancements (Junos OS Release 19.2R1) |
Easily manage the device certificates required for SSL. |
|
|
SSL proxy troubleshooting commands (Junos OS Release 19.3R1) |
Easily monitor SSL-related issues by using an extensive set of operational commands. |
|
|
Tenant systems (Junos OS Release 18.3R1) |
Reduce the number of physical devices and provide isolation and logical separation at the tenant system level. |
|
|
Unified policies (Junos OS Release 18.2R1) |
Get greater control and extensibility to manage dynamic applications traffic within the security policy. |
Improved Security
| Feature | If You Want to | Go to |
|---|---|---|
| Adaptive Threat Profiling (Junos OS Release 20.2R1) |
Get your device ready to adapt to changing threats and network conditions with adaptive threat profiling. |
|
|
Express Path for SRX4600 devices (Junos OS Release 19.3R1) |
Use Express Path functionality on SRX4600 devices for better throughput by reducing packet-processing latency. |
|
|
Symmetric fat tunnel support (Junos OS Release 19.4R1) |
Get an improved IPsec tunnel throughput value—up to 10 times of current value—by using fat tunnel technology. |
PMI Flow Based CoS functions for GTP-U |
|
IDP sensor enhancements and intelligent inspection (Junos OS Release 19.2R1) |
Use IDP sensor settings and IDP intelligent inspection to optimize system resource usage. |
|
|
IDP signature language constructs (Junos OS Release 19.4R1) |
Use signature language constructs to write more efficient signatures that helps in reducing false positives in IDP. |
|
|
PowerMode IPsec (PMI) enhancements (Junos OS Release 19.1R1) |
Enjoy the enhanced IPSec performance improvements using PMI. | |
|
NP cache increase (Junos OS Release 20.2R1) |
Experience an enhanced throughput with increased number of hash table entries for IOC3 and IOC4 on the SRX5000 line of devices and for IOC on the SRX4600. |
|
|
SSL performance enhancements (Junos OS Release 18.1R1) |
Get enhanced SSL/TLS optimized for HTTPS traffic that results in improved website performance without compromising security, and maximizing user experience. |
|
|
User Principal Name (UPN) support in JIMS and User Firewall Authentication (Junos OS Release 20.1R1) |
Simplify the firewall authentication process by using UPN as the logon name |
Understanding User Principal Name as User Identity in SRX Series Devices |
SD-WAN Enhancements
| Feature | If You Want to | Go to |
|---|---|---|
|
Advanced policy-based routing (APBR) granularity enhancements (Junos OS Release 19.1R1) |
Bypass the application services including security policies, application quality of service (AppQoS), Juniper ATP, IDP, Security Intelligence (SecIntel), and Content Security using the APBR rule. |
|
|
AppQoE enhancements (Junos OS Release 20.2R1) |
Configure AppQoE for multihoming with active-active deployment. |
Enhanced Reporting
| Feature | If You Want to | Go to |
|---|---|---|
|
Application identification enhancements for J-Web (Junos OS Release 18.1R1) |
Use the enhanced Application Signature page to create, modify, clone, and delete application signature groups. You can view the details of predefined application signatures that are already downloaded. |
|
|
Dashboard enhancement (Junos OS Release 19.2R1) |
View the Web filtering, Antispam, Content filtering, Application & Users, and Threat monitoring widgets in the J-Web dashboard for root, logical systems, and tenant users. |
|
|
CLI enhancements to support J-Web (Junos OS Release 18.4R1) |
Display alphabetical list application and application group,
limit the number of entries in output, display details in a
sorted order, and use filters on output columns to search
applications easily in J-Web by configuring the |
Virtual and Container Firewall Features
| Feature | If You Want to | Go to |
|---|---|---|
|
vSRX Virtual Firewall 3.0 support (Junos OS Release 18.4R1) |
Secure your private and public cloud environments with improved scalability and performance by using vSRX Virtual Firewall 3.0. |
Overview of the available virtual SRX models, vSRX and vSRX 3.0 |
|
vSRX Virtual Firewall on Google Cloud Platform Marketplace (Junos OS Release 19.2R1) |
Use the vSRX Virtual Firewall virtual firewall to extend your private cloud into public cloud environments, securely moving data and workloads with ease. |
|
| cSRX Container Firewall support (Junos OS Release 18.1R1) | Protect your containerized environments with advanced security services, including content security, intrusion prevention system (IPS), AppSecure, and Content Security . | Building Containers with cSRX |
What's Next
Now you can get started with configuring new features on your security device. See complete documentation at TechLibrary. For additional references, see Appendix: Resources.