Resolved Issues In Junos Os Release 10.4 For Srx Series Services Gateways And J Series Services Routers - Juniper JUNOS OS 10.4 - RELEASE NOTES Release Note

Copyright © 2010, Juniper Networks, Inc.
Issues in Junos OS Release 10.4 for SRX Series Services Gateways and J Series Services Routers
WLAN
On SRX210, SRX240, and SRX650 devices, J-Web online Help displays the list of all
the countries and is not based on the regulatory domain within which the access point
is deployed. [PR/469941]
WXC Integrated Services Module
When two J Series devices with WXC Integrated Services Modules (WXC ISM 200s)
installed are configured as peers, traceroute fails if
peers. [PR/227958]
On J6350 devices, Junos OS does not support policy-based VPN with WXC Integrated
Services Modules (WXC ISM 200s). [PR/281822]
Resolved Issues in Junos OS Release 10.4 for SRX Series Services Gateways and
J Series Services Routers
The following are the issues that have been resolved since Junos OS Release 10.3 for
Juniper Networks SRX Series Services Gateways and J Series Services Routers. The
identifier following the descriptions is the tracking number in the Juniper Networks Problem
Report (PR) tracking system.
Application Layer Gateways (ALGs)
On SRX240 and SRX650 devices, the maximum SCCP concurrent calls could not be
made under stress conditions. [PR/490839: This issue has been resolved.]
On SRX650 devices, the SQL ALG did not function properly when data was transmitted
over the control session. [PR/524444: This issue has been resolved.]
On SRX3400, SRX3600, SRX5600, and SRX5800 devices, the SIP ALG was not
supported in Junos Release 10.4 (the SIP ALG was not supported in previous versions
either and, by default, was disabled). If enabled, the configuration was accepted, but
it would not work properly. [PR/527446: This issue has been resolved.]
On SRX5800 devices in specific scenarios, sessions with the FTP ALG applied got stuck
at a timeout value of 2 seconds, resulting in an inability to form new sessions or a
reduced session capacity. [PR/550815: This issue has been resolved.]
AppSecure
When you downloaded the predefined application identification signature database
on SRX3400, SRX3600, SRX5600, and SRX5800 devices, the new database merged
with the existing database instead of replacing it. If duplicate entries in the order and
port-mapping signature fields existed, there might be issues in detecting applications
defined by those signatures. If a duplicate port-mapping value existed, new signature
database downloads would fail with the status output: "AI installation failed! Attack
DB update failed". The /var/log/appidd log will showed: "port xxx is specified more
than once" (xxx will equal the port-mapping value that is duplicated).
[PR/518183, PR/521482: This issue has been resolved.]
redirect-wx is configured on both
161