Alert Type:
PSN - Product Support Notification
Product Affected:
ISG 1000, ISG 1000-IDP, ISG 2000, ISG 2000-IDP, and NetScreen-5000 series with the NS 5000-MGT2/SPM2 and NS 5000-MGT3/SPM3.
Alert Description:
Any ScreenOS device on ASIC
hardware (including ISG1000, ISG1000-IDP, ISG2000, ISG2000-IDP, NS5200,
and NS5400) running 6.3.0r23 or 6.3.0r24, may experience packet drops
due to ASIC reinitializing.
Solution:
This issue is tracked via
PR1282754. This issue is addressed in ScreenOS 6.3.0r23b and ScreenOS 6.3.0r24b from the Juniper Software Download page.
Download ScreenOS Software
- Go to http://www.juniper.net/support/downloads
- Select your product
- Click the "Software" tab
- Select the Install Package, and follow the online prompts
Workaround
This problem can be worked around by applying the command:
unset flow tcp-syn-check strict