View Only
last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  Security Updates

    Posted 05-05-2022 05:36
    Hello - I have an SRX240H2 which i have up to date as posted here with 12.3X48-D105.  But when i go here it looks like it is applying a lot of other more recent findings and associated fixes.  Is it just because the search is returning the wrong information in the second link? How do I know if I'm up to date or if there are outstanding vulnerabilities and/or fixes?

    Here is the second link -[Security%20Advisories]&f:level1=[Product]&f:level3=[SRX-Series%20Branch]

    I don't know what boxes to check to see what vulnerabilities and fixes are available for SRX240H2.


  • 2.  RE: Security Updates

    Posted 05-06-2022 12:56
    Good day.  The 12.3X48-D105 release is the last release for the SRX240H2 that there is likely to be, and it was released in 2020 and there are no more updates being provided.  You probably want to look at retiring that unit and upgrading to newer hardware which is supported and gets constant updates and fixes for vulnerabilities.  The SRX340 would be the direct replacement for the SRX240H2.


  • 3.  RE: Security Updates

    Posted 05-13-2022 10:33
    Is there somewhere I can get an official and definitely not tampered with SRX340? last time I got it from a reseller on Amazon which was not ideal.  I'm literally just using this for my edge router at my home because security is important to me.  I am very surprised about the patching situation.  I thought the end of support date meant that I would still be getting security updates......

    Are there any other models that would be an easy move and scaled the same from srx240h2?


  • 4.  RE: Security Updates

    Posted 05-13-2022 17:24
    I have to admit that eBay is a common source of Juniper gear for most home setups.  But there is nothing stopping you from buying new from a Juniper partner in your area on a cash basis or on-line retailers.  There are also on-line used dealers of Juniper hardware, but I have never used them so can't say how good they are.

    The SRX300 has about the same throughput as the SRX240H2 did.  So either an SRX300 or SRX320 (same as a SRX300 but with two expansion slots) should work.  For full gigabit throughput though an SRX340 is really needed.


  • 5.  RE: Security Updates

    Posted 05-07-2022 06:06
    The key document for you question is this one.

    Here it lists when the end of engineering support happens for a Junos release train and this last release for the EOL srx220 platform was June 2020

    Junos OS 12.3X481, 2, 4
    First Release
    End of Engineering
    End of support

    At end of engineering no more software updates will be released and at end of support the contracts can no longer be honored.

    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)