Know the Upgrade Path for Junos OS Release 19.4R3 and 20.2R3
SUMMARY Read this topic to determine the upgrade path for Junos OS releases for your SRX Series Firewalls and vSRX Virtual Firewall.
Knowing the upgrade path helps you to choose the correct Junos OS package or packages to install.
You can consider upgrading from Junos OS Release 15.1X49 to 19.4R3 (SRX Series) or to 20.2R3 (vSRX Virtual Firewall and SRX380) as stated in Table 1.
| Devices | Junos OS Release |
|---|---|
| SRX300, SRX320, SRX340, SRX345, SRX550M, SRX4100, SRX4200, SRX4600, SRX5400, SRX5600, SRX5800 | 19.4R3-S1 |
| SRX380, SRX1500, vSRX Virtual Firewall, and cSRX Container Firewall | 20.2R3 |
The details provided in the table are as per the recommendations at the time of publishing this document.
The best practice is to always check the most up-to-date version as suggested in Knowledge Base article. See Junos Software Versions - Suggested Releases to Consider and Evaluate.
For information on upgrade path, see Junos Upgrade Paths for SRX Platforms.
Upgrade Path for Your SRX Series
The following sections help you to determine the upgrade paths for the latest recommended versions of Junos OS releases.
Direct Upgrade
We support direct upgrade from Junos OS Release 15.1X49 to Junos OS Release 19.4R3-S1 for SRX Series Firewalls.
Table 2 lists the direct upgrade paths supported for SRX Series Firewalls.
| From Current Junos OS Release | Direct Upgrade Releases |
|---|---|
|
15.1X49 |
19.4R3 Service release |
|
18.4R3 or 18.4R3 Service releases |
19.4R3 or 19.4R3 Service release. |
|
19.3 |
19.4, 20.1, and 20.2 |
|
19.4 |
20.1 and 20.2 |
Interim Upgrade Path for Junos OS Releases 19.4R3 and 20.2R3
Table 3 and Table 4 list the interim upgrade paths supported for SRX Series Firewalls.
Use the tables to determine the upgrade path you must follow when upgrading to a newer version of Junos OS Release.
| Junos OS Release | Target Junos OS (First Hop) | Target Junos OS (Second Hop) | Target Junos OS (19.4R3) |
|---|---|---|---|
| 15.1X49 | 19.4R3-S1 | — | — |
| 17.3 | 18.2 | 19.1 | 19.4R3 |
| 17.4 | 18.3 | 19.2 | 19.4R3 |
| 18.1 | 18.4 | 19.3 | 19.4R3 |
| 18.2 | 19.1 | 19.4R3 | — |
| 18.3 | 19.2 | 19.4R3 | — |
| 18.4 | 19.3 | 19.4R3 | — |
| 19.1 | 19.4R3 | — | — |
| 19.2 | 19.4R3 | — | — |
| 19.3 | 19.4R3 | — | — |
| 19.4 | 19.4R3 | — | — |
| Junos OS Release | Target Junos OS (First Hop) | Target Junos OS (Second Hop) | Target Junos OS (Third Hop) | Target Junos OS (20.2R3) (SRX380, SRX1500, vSRX Virtual Firewall, and cSRX Container Firewall) |
|---|---|---|---|---|
| 15.1X49 | 19.4R3-S1 (direct upgrade) | 20.2R3 | ||
| 17.3 | 18.2 | 19.1 | 19.4R3 | 20.2R3 |
| 17.4 | 18.3 | 19.2 | 19.4R3 | 20.2R3 |
| 18.1 | 18.4 | 19.3 | 20.2R3 | |
| 18.2 | 19.1 | 19.4R3 | 20.2R3 | |
| 18.3 | 19.2 | 19.4R3 | 20.2R3 | |
| 18.4 | 19.3 | 20.2R3 | — | |
| 19.1 | 19.4R3 | 20.2R3 | — | |
| 19.2 | 19.4R3 | 20.2R3 | — | |
| 19.3 | 20.2R3 | — | ||
| 19.4 | 20.2R3 | — | ||
| 20.1 | 20.2R3 | — | ||
| To Upgrade From | Path |
|---|---|
| Junos 15.1X49-D170 to 19.4R3 | 15.1X49-D170 → 19.4R3 (direct upgrade) |
| Junos 17.3R1 to 19.4R3 | 17.3 → 18.2 →19.1 → 19.4R3 (interim upgrade) |
| Junos 18.4R1 to 20.2R3 | 18.4 → 19.3 → 20.2R3 (interim upgrade) |
If you are using SRX380 Services Gateways, note that the first supported version of Junos OS Release is 20.1R1. We support direct upgrade to Junos OS 20.2R3 from 20.1R1.
Upgrade Path for vSRX Virtual Firewall
Junos OS Release 18.4R1 supports a new software architecture called vSRX Virtual Firewall 3.0. We recommend upgrading to vSRX3.0 to quickly introduce new services, deliver customized services to the users, and scale security services based on dynamic needs.
Use Table 5 to know about the direct upgrade path supported for your Junos OS on vSRX Virtual Firewall instances.
| Current Junos OS Release | Direct Upgrade To Release |
|---|---|
| 15.1X49 | 17.4, 18.1, 18.2, 18.3, 18.4, 19.1, or 19.2 |
Note that we do not support direct upgrade of vSRX Virtual Firewall from Junos OS Release 15.1X49 Releases to 19.3 and higher releases.
We recommend Junos OS Release 20.2R3 for your vSRX Virtual Firewall instance.
We recommend that you deploy a new vSRX Virtual Firewall VM instead of performing a Junos OS upgrade. Upgrading to the latest VM enables you to move from vSRX Virtual Firewall to the newer and enhanced vSRX Virtual Firewall 3.0 architecture.
Downgrading Junos OS
We support downgrades up to three Junos OS releases at a time. You can downgrade to the Junos OS release that occurs directly before the currently Junos OS release, or to three Junos OS releases before. For example, you can downgrade directly from Junos OS Releases 20.2R1 to 19.4R3. If you want to downgrade from 20.2R1 to 18.4R1, you must first downgrade to 19.3R1 and then to 18.4R1.
What's Next
Now that you’ve determined the Junos OS version upgrade path, proceed to perform upgrade procedures. See How to Upgrade to Junos OS Release 19.4R3 and 20.2R3.