Intrusion Detection And Prevention (Idp); Ipv6 Support; J-Web - Juniper JUNOS OS 10.4 - RELEASE NOTES REV 6 Release Note

JUNOS OS 10.4 Release Notes
154

Intrusion Detection and Prevention (IDP)

If SRX series device that are configured for IDP and are upgraded to Junos OS Release
10.4, administrators must install the new security database as old IDP detector might
not be compatible.
Administrators must update the detector by using the
security-package download full-update
security-package install
IDP does not allow header checks for nonpacket contexts.
On SRX100, SRX210, SRX220, SRX240, and SRX650 devices, maximum supported
entries in ASC table for is 100,000 entries. However, since the user land buffer has fix
size of 1MB as a limitation, therefore it displays maximum 38837 cache entries.
On SRX100, SRX210, SRX240, and SRX650 devices, policy compilation takes a long
time because:
Software DFA is now used for attack signature compilation
IDPD daemon gets lesser CPU time slice during compilation
For all other limitations in IDP, see "Limitations of IDP" in the Junos OS Security
Configuration Guide.

IPv6 support

NOTE: Concerning NSM support, do not follow the information presented in
the Junos OS Security Configuration Guide. Please consult the NSM release
notes for version compatibility, required schema updates, and up-to-date
support information.
For limitations in IPv6, see "Limitations of IPv6" in the Junos OS Security Configuration
Guide.

J-Web

J-Web browser support for Dell PowerConnect SRX Series and J Series devices—To
access J-Web for all platforms, your device requires the following supported browsers
and OS:
Browser: Microsoft Internet Explorer version 6.0, 7.0, and Mozilla Firefox version
above 3.0 and below 3.5.
NOTE: Other browser versions might not provide access to J-Web and
only English-version browsers are supported.
OS: Microsoft Windows XP Service Pack 3
SRX Series and J Series browser compatibility
command followed by
command.
request security idp
request security idp
Copyright © 2011, Juniper Networks, Inc.