Table of Contents
Advertisement
JUNOS OS 10.4 Release Notes
178
The Junos OS Security Configuration Guide states that the maximum acceptable timeout
range for an IDP policy is 0 through 65,535 seconds, whereas the
range has been modified to 0 through 64,800 seconds.
The Junos OS Security Configuration Guide is missing information about the new CLI
option
download-timeout
, which has been introduced to
automatic download-timeout < value >
The default value for
download-timeout
the download times out, the signature is automatically updated after the download.
If the download takes longer than the configured period, the auto signature update is
aborted.
user@host# set security idp security-package automatic download-timeout ?
Possible completions:
Maximum time for download to complete (1 - 60 minutes)
[edit]
set security idp security-package automatic download-timeout
user@host#
Range: 1
60 seconds
Default: 1 second
The Junos OS Security Configuration Guide states the following limitations in the
"Limitations of IDP" section:
On SRX Series and J Series devices, IP actions do not work when you select a timeout
value greater than 65,535 in the IDP policy.
This issue has been fixed and is no longer a limitation.
The Junos OS Security Configuration Guide incorrectly states the following limitations
in the "Limtations of IDP" section:
On SRX210, SRX240, and SRX650 devices, the maximum number of IDP sessions
supported is 16,000.
The correct information is as follows:
The maximum number of IDP sessions supported is 1600 on SRX210 devices, 32,000
on SRX240 devices, and 128,000 on SRX650 devices.
When specifying a forwarding target after authentication on a captive portal, use the
?target=
option followed by either the
variable forwards authenticated users to the protected resource they
%dest-url%
originally specified. A URL forwards authenticated users to a specific site.
Note that when entering a URL with the
characters for any special characters in the URL. Use the following escape characters
for these common special characters:
Replace
with
:
%3A
Replace
with
/
%2F
Replace
with
-
%2D
Replace
with
.
%2E
set security idp security-package
to configure the download timeout in minutes.
is one minute. If download is completed before
< download-timeout >
%dest-url%
variable or a specific URL. The
?target=
option, you must substitute escape
Copyright © 2011, Juniper Networks, Inc.
timeout
ipaction
Advertisement
Table of Contents
