not get affected after Routing Engine failover if the Infranet Controller auth table
mapping action is configured as
always provision auth table
. [PR/416843]
■
On SRX3400, SRX3600, SRX5600, and SRX5800 devices, you should not
configure rulebase-DDoS rules that have two different application-DDoS objects
to run on one destination service because the traffic destined to one application
server can encounter more than one rule. Essentially, for each protected
application server, you have to configure a single application-level DDoS rule.
[PR/467326]
Unified Access Control (UAC)
■
On J Series devices, MAC address-based authentication does not work when the
router is configured as a UAC Layer 2 Enforcer. [PR/431595]
Unified Threat Management (UTM)
■
On SRX210 High Memory devices, content filtering provides the ability to block
protocol commands. In some cases, blocking these commands interferes with
protocol continuity, causing the session to hang. For instance, blocking the
FETCH
command for the IMAP protocol causes the client to hang without receiving any
response. [PR/303584]
■
On SRX210 High Memory devices, when the content filtering message type is
set to
protocol-only
, customized messages appear in the log file. [PR/403602]
■
On SRX210 High Memory devices, the express antivirus feature does not send
a replacement block message for HTTP upload (POST) transactions if the current
antivirus status is
engine-not-ready
and the fallback setting for this state is
block
.
An empty file is generated on the HTTP server without any
block
message
contained within it. [PR/412632]
■
On SRX240, SRX650, J2320, J2350, J4350, and J6350 devices, Outlook Express
is sending infected mail (with an EICAR test file) to the mail server (directly, not
through DUT). Eudora 7 uses the IMAP protocol to download this mail (through
DUT). Mail retrieval is slow, and the EICAR test file is not detected. [PR/424797]
■
On SRX650 devices operating under stress conditions, the UTM subsystem file
partition might fill up faster than UTM can process and clean up existing
temporary files. In that case, the user might see error messages. As a workaround,
reboot the system [PR/435124]
■
On SRX240 High Memory devices, FTP download for large files (larger than 4
MB) does not work in a two-device topology. [PR/435366]
■
On SRX210, SRX240, and SRX650 devices, the Websense server stops taking
new connections after HTTP stress. All new sessions get blocked. As a
workaround, reboot the Websense server. [PR/435425]
■
On SRX240 devices, if the device is under UTM stress traffic for several hours,
users might get the following error while issuing a UTM command:
the utmd subsystem is not responding to management requests
.
As a workaround, restart the
utmd
process. [PR/436029]
Issues in JUNOS Release 10.1 for SRX Series Services Gateways and J Series Services Routers
■
155
Issues in JUNOS Release 10.1 for SRX Series Services Gateways and J Series Services Routers
