Filter
Top Products
Juniper Networks NetScreen Release Notes
ScreenOS 5.0.0r9-FIPS P/N 093-1638-000, Rev. A Page 31 of 42
– Freeswan - The Freeswan 1.3 VPN client is incompatible with ScreenOS
5.0.0 in certain configurations due to IKE features that Freeswan does not
fully support. The result is that Phase 2 negotiations and Phase 2 SA will
not complete if the following commands are enabled in 5.0.0:
set ike initiator-set-commit
set ike responder-set-commit
set ike initial-contact
W/A: Unset these commands to ensure compatible configuration on the
Juniper Networks security appliance.
• Compatible Web Browsers - The WebUI for ScreenOS 5.0.0 was tested
with and supports Microsoft Internet Explorer (IE) browser versions 5.5 and
above, and Netscape Navigator 6.X for Microsoft Windows platforms, and
Microsoft Internet Explorer version 5.1 for MacOS 10.x. Other versions of
these and other browsers, were reported to display erroneous behavior.
• SNMP Trap Type Values Different in ScreenOS 5.0.0 – ScreenOS 5.0.0
uses a different numbering system than previous ScreenOS releases to
identify trap types. SNMP maps specific integers to indicate specific trap
types, or events that generate traps. For example, the traditional SNMP trap
type value for a Cold Start is 0. However, different vendors deploy different
values to indicate different trap types. Please check the ScreenOS Messages
Guide for the correct values in ScreenOS 5.0.0.
5.2.1 Upgrade Paths from Previous Releases
For detailed information on how to upgrade any Juniper Networks security
appliance from ScreenOS 4.0.0 and later to ScreenOS 5.0.0, refer to the
NetScreen ScreenOS Migration Guide. The migration guide provides step-by-
step upgrade procedures and important information about upgrading
Juniper Networks security appliances.
The migration guide also provides a step-by-step procedure to downgrade a
Juniper Networks security appliance from ScreenOS 5.0.0 to ScreenOS 4.0.0
and later using the exec downgrade CLI command.
Important: To avoid downtime while upgrading devices in an NSRP
configuration (active-passive or active/active), refer to the NetScreen
ScreenOS Migration Guide which describes procedures to upgrade the devices
without causing any downtime.