Table of Contents
Advertisement
Copyright © 2011, Juniper Networks, Inc.
Issues in Junos OS Release 10.4 for SRX Series Services Gateways and J Series Services Routers
Unified Access Control (UAC)
On J Series devices, MAC address-based authentication does not work when the router
is configured as a UAC Layer 2 Enforcer. [PR/431595]
Unified Threat Management (UTM)
On SRX210 High Memory devices, content filtering provides the ability to block protocol
commands. In some cases, blocking these commands interferes with protocol
continuity, causing the session to hang. For instance, blocking the
for the IMAP protocol causes the client to hang without receiving any response.
[PR/303584]
On SRX210 High Memory devices, when the content filtering message type is set to
, customized messages appear in the log file. [PR/403602]
protocol-only
On SRX210 High Memory devices, the express antivirus feature does not send a
replacement block message for HTTP upload (POST) transactions if the current
antivirus status is
engine-not-ready
empty file is generated on the HTTP server that contains no
[PR/412632]
On SRX240, SRX650, and J Series devices, Eudora 7 (through DUT) and Outlook
Express (directly, not through DUT) downloads infected mail (with an EICAR test file)
to the mail server because of which the mail retrieval is slow. [PR/424797]
On SRX650 devices operating under stress conditions, the UTM subsystem file partition
might fill up faster than UTM can process and clean up existing temporary files. In that
case, the user might see error messages. As a workaround, reboot the system.
[PR/435124]
On SRX240 High Memory devices, FTP download for large files (> 4 MB) does not
work in a two-device topology. [PR/435366]
On SRX210, SRX240, and SRX650 devices, the Websense server stops taking new
connections after HTTP stress. All new sessions get blocked. As a workaround, reboot
the Websense server. [PR/435425]
On SRX240 devices, if the device is under UTM stress traffic for several hours, users
might see the following error while using a UTM command:
the utmd subsystem is not responding to management requests
As a workaround, restart the
On SRX100 High Memory, SRX210 High Memory, SRX240 High Memory, and SRX650
devices, more than 1500 antispam requests are not supported because of system
limitation. [PR/451329]
On SRX240 High Memory devices, during UTM web traffic stress test, some leak of AV
scanner contexts is observed in some error pages. [PR/538470]
On SRX650 devices, when express AV is enabled, traffic from the server and client are
buffered at the device. Sometimes, the buffer resource runs out because the traffic
arrives faster than the buffer resource are released and results in the device detecting
and the fallback setting for this state is
process. [PR/436029]
utmd
FETCH
command
. An
block
message.
block
.
167
Advertisement
Table of Contents
