Rate and give feedback:  Feedback Received. Thank You!

Rate and give feedback: 

X

This document helped resolve my issue

Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  

E-mail: 

Enter a valid Email ID

Need product assistance? Contact Juniper Support

Submit

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.

English  

English

New and Changed Features

This section describes new features as well as enhancements to existing features in Junos OS Release 18.1R1 for cSRX support.

• New Features in Junos OS Release 18.1R1 for cSRX
• cSRX Architecture Illustration
• Supported Features
• Changes in Behavior and Syntax

New Features in Junos OS Release 18.1R1 for cSRX

cSRX Container Firewall

• cSRX deployment in bare-metal Linux server—Starting in Junos OS Release 18.1R1, the cSRX Container Firewall is a containerized version of the SRX Series Services Gateway with a low memory footprint. cSRX runs as a single container on a Linux bare-metal server. It uses a Linux bare-metal server as the hosting platform for the Docker container environment. The cSRX container packages all of the dependent processes (daemons) and libraries to support the different Linux host distribution methods (Ubuntu, Red Hat Enterprise Linux, or CentOS). You use standard Docker commands to manage the cSRX container. cSRX provides advanced security services, including content security, AppSecure, and unified threat management in a container form factor.

  [See cSRX Deployment Guide for Bare-Metal Linux Server.]

• cSRX deployment in Contrail—Starting in Junos OS Release 18.1R1, the cSRX Container Firewall can be deployed on a Docker Engine compute node as a dedicated firewall in the Contrail Networking cloud environment to provide differentiated Layer 4 through 7 security services for multiple tenants as part of a service chain. With the Contrail orchestrator, cSRX is deployed as a large scale security service, and is configured to steer traffic from vRouter with vRouter interface (VIF). Traffic and health statistics are monitored by the Contrail service orchestrator. cSRX provides advanced security services, including content security, AppSecure, and unified threat management in a container form factor.

  [See cSRX Deployment Guide for Contrail.]

• cSRX: UTM support—Starting in Junos OS Release 18.1R1, the Junos OS SRX Series software provides support for all UTM functionality on the cSRX platform. This functionality includes features such as:
  • Antispam
  • Sophos Antivirus
  • Web filtering
  • Content filtering

  [See UTM Feature Guide for Security Devices .]

• cSRX: User Firewall support—Starting in Junos OS Release 18.1R1, the Junos OS SRX Series software provides support for the user firewall functionality on the cSRX platform. This functionality includes features such as:
  • Policy enforcement with matching source identity criteria
  • Logging with source identity information
  • Integrated user firewall with active directory
  • Local authentication

  [See Authentication and Integrated User Firewalls Feature Guide for Security Devices.]

• cSRX: NAT Support —Starting in Junos OS Release 18.1R1, the Junos OS SRX Series software provides support for all NAT functionality on the cSRX platform. This functionality includes features such as:
  • Source NAT
  • Destination NAT
  • Static NAT
  • Persistent NAT and NAT64
  • NAT hairpinning
  • NAT for multicast flows

  [See Network Address Translation Feature Guide for Security Devices.]

cSRX Architecture Illustration

cSRX Architecture

Figure 1 is a high-level illustration of the cSRX architecture and Figure 2 is a high-level illustration of a cSRX compute node in a Contrail Networking cloud environment.

For details about the cSRX architecture, see the Overview topic in cSRX Deployment Guide for Bare-Metal Linux Server and cSRX Deployment Guide for Contrail.

Figure 1: cSRX Architecture

Figure 2: cSRX Architecture in Contrail

Supported Features

The cSRX Container Firewall inherits many of the branch SRX Series Junos OS features. This topic outlines the SRX series features supported by cSRX along with the features that are not applicable in a containerized environment.

SRX Series Features Supported on cSRX

Table 1 provides a high-level summary of the feature categories supported on cSRX and any feature considerations.

To determine the Junos OS features supported on cSRX, use the Juniper Networks Feature Explorer, a Web-based application that helps you to explore and compare Junos OS feature information to find the right software release and hardware platform for your network. See Feature Explorer.

SRX Series Features Not Supported on cSRX

Table 2 lists SRX Series features that are not applicable in a containerized environment, that are not currently supported, or that have qualified support on cSRX.

Changes in Behavior and Syntax

This section lists the changes in behavior of cSRX features and changes in the syntax of Junos OS statements and commands in Junos OS Release 18.1 for cSRX.

For the most complete and latest information about changes in command behavior and syntax applicable to all SRX Series platforms in Junos OS Release 18.1R1, see Changes in Behavior and Syntax for SRX.