Secure Access Ssl Vpn Sa Series And United Access Control Infranet Controllers - Juniper NETWORK AND SECURITY MANAGER - RELEASE NOTES REV 1 Release Note

Secure Access SSL VPN SA Series and United Access Control Infranet Controllers

Copyright © 2010, Juniper Networks, Inc.
458945—NSM cannot manage a device running a ScreenOS version earlier than 6.3
with an IPv6 configuration. For NSM to effectively manage the device, it must be
upgraded to ScreenOS 6.3 and added or imported into NSM.
461167—You cannot export device logs using the syslog option from the NSMXpress
WebUI.
461181—Updating fails when a policy with web filtering enabled is pushed to a vsys
device from NSM.
461986—You cannot generate reports and e-mail them using the email.sh option in
the NSMXpress appliance.
464396—On a modeled ScreenOS root device with a modeled vsys device, NSM does
not display the IPv6 option on the modeled vsys.
464517—When a rule is added to a policy and the Notify Closed Session option is
enabled, NSM shows the 'unset IDP' command in the delta configuration. If IDP is
enabled on the device, IDP does not get unset.
465144—NSM does not display the option to monitor the IDP security module under
the VSD group monitoring section.
479370—NSM does not generate dead peer detection configuration for IKE gateways
on SRX Series devices.
489282—When you update an SSG5 running ScreenOS 6.1, NSM unsets eth0/0 and
BGP even when an eth 0/0 change is unnecessary and BGP is not enabled. The
workaround is to enable BGP on tunnel 1.1.
497120—Updating an SRX3600 device with an IDP policy fails, displaying a "Previous
commit is in progress" error message. The workaround is to wait for several minutes
until the back-end commit process is completed.
518101—Validating a device fails after adjusting the OS version or updating the software
through NSM.
521642—NSM displays delta configuration for ISG devices after the OS version is
adjusted from 6.1 to 6.3.
522885—While adding SOS devices on an NSM HA server, a DB_EVENT_PANIC error
message is displayed, and the HA server fails over to the secondary server. This issue
is seen occasionally.
522890—Editing a ScreenOS cluster device, with a device configuration of 275 KB,
takes approximately 5 minutes.
523203—ISG-1000 devices running ScreenOS 6.3r3 display a validation error under
the root profile.
436750—NSM cannot import an IC if the IC has more than 5100 resource access
policies. The import operation does not complete.
455844—Deleting an SA device object from NSM does not remove the object until
services are restarted. This is seen intermittently.
Known Issues
29