Open Issues

Use 512 antireplay window size for IPv6 in fat-tunnel. The ESP sequence check might otherwise report out-of-order packets if the fat-tunnel parallel encryption is within 384 packets (12 cores * 32 packets in one batch). Hence there are no out-of-order packets with 512 antireplay window size. PR1470637

HTTP sessions takes approximately 10 minutes to re-establish after a link flap between hub and spoke. PR1577021

With SSL proxy configured along with Web proxy, the client session might not closed on the device even though proxy session ends gracefully. PR1580526

HA AP mode on-box logging in Logical Systems and Tenant Systems, Intermittently Security log contents of binary log file in Logical Systems and Tenant Systems are not as expected. PR1587360

When you enable TCP path finder in the VPN gateway, VPN connection is established properly. After VPN connection is established, able to ping from JSC installed client to server behind gateway, but unable to ping from server behind gateway to JSC installed client.

PR1611003

The PKID process stops due to null pointer dereferencing during local certificate verification in some cases. PR1624844

On SRX1500 devices, ISSU is getting aborted with ISSU is not supported for Clock Synchronization (SyncE). PR1632810

SMTPS sessions are not getting identified when traffic is sent from IXIA (BPS) profile. PR1635929

The remote access Juniper Networks standard license might not get freed up while disconnect or reconnect after RG0 failover. PR1642653

AAMW ACTION LOG are not observed when setting log notifications sometimes. PR1644000

IDP clear counters for Logical Systems and Tenant Systems not working. PR1648187

ISSU will be aborted or failed with the warning. 'warn-message "ISSU is not supported for Clock Synchronization (SyncE)";''override'In '/var/tmp/paSBfY/etc/indb//config.indb' line 162included from '/var/tmp/paSBfY/etc/indb/issu.indb' line 10 'override' syntax errorISSU not supported as current image uses explicit tags for message structures. PR1628172

In AA mode with NAT configuration, on RG failover, traffic getting dropped on SRX Series devices. PR1636596

Use load update instead of load override to prevent the error messages. PR1630315

On all Junos OS and Junos OS EVO platforms, when copy-config, get-configuration, discard-change RPCs run in two parallel NETCONF sessions and the database is also accessed in parallel by two NETCONF sessions, it leads to database corruption and mgd related services might stop. PR1641025

On SRX5400, SRX5600, and SRX5800 devices, during in-service software upgrade (ISSU), the IPsec tunnels flap, causing a disruption of traffic. The IPsec tunnels recover automatically after the ISSU process is completed. PR1416334

Fragment packets through policy based IPsec tunnel could be dropped in some rare case when PMI is enabled. PR1624877