Table of Contents
Advertisement
Copyright © 2011, Juniper Networks, Inc.
New Features in Junos OS Release 10.4 for SRX Series Services Gateways and J Series Services Routers
Before you begin the installation, ensure the following prerequisites are met:
Junos OS upgrade image and autoinstall.conf file are copied to the USB device.
Adequate space is available on the SRX Series device to install the software image.
To use a USB flash drive to install the Junos OS image on an SRX Series device:
Insert the USB flash drive into the USB port of the SRX Series device and wait for
1.
the LEDs to blink amber, then steadily light amber, indicating that the SRX Series
device detects the Junos OS image.
If the LEDs do not turn amber, press the Power button or power-cycle the device
and wait for the LEDs to steadily light amber.
Press the Reset Config button on the SRX Series device and wait for the LEDs to
2.
turn green, indicating that the Junos OS upgrade image has successfully installed.
If the USB device is plugged in, the Reset Config button always performs as an
image upgrade button. Any other functionality of this button is overridden until you
remove the USB flash drive.
Remove the USB flash drive. The SRX Series device restarts automatically and
3.
loads the new Junos OS version.
NOTE: If an installation error occurs, the LEDs light red, which might indicate
that the Junos OS image on the USB flash drive is corrupted. An installation
error can also occur if the current configuration on the SRX Series device
is not compatible with the new Junos OS version on the USB. You must
have console access to the SRX Series device to troubleshoot an installation
error.
[Junos OS Administration Guide for Security Devices]
TCP Session
TCP Session Check Per Policy—This feature is supported on all SRX Series devices.
By default, TCP SYN check and TCP sequence check options are enabled on all TCP
sessions. The Junos operating system (Junos OS) performs the following operations
during TCP sessions:
Checks for SYN flags in the first packet of a session and rejects any TCP segments
with non- SYN flags attempting to initiate a session.
Validates the TCP sequence numbers during stateful inspection.
The TCP session check per-policy feature enables you to configure SYN checks and
sequence checks for each policy. Currently, the TCP options flags, no-sequence-check
and no-syn-check, are available at a global level to control the behavior of services
gateways. To support per-policy TCP options, the following two options are available:
sequence-check-required: The sequence-check-required value will override the
global value no-sequence-check.
111
Advertisement
Table of Contents
