ASIC Reinitialize May Occur on ScreenOS 6.3.0r23 and 6.3.0r24

Alert Type:

PSN - Product Support Notification

Product Affected:

ISG 1000, ISG 1000-IDP, ISG 2000, ISG 2000-IDP, and NetScreen-5000 series with the NS 5000-MGT2/SPM2 and NS 5000-MGT3/SPM3.

Alert Description:

Any ScreenOS device on ASIC hardware (including ISG1000, ISG1000-IDP, ISG2000, ISG2000-IDP, NS5200, and NS5400) running 6.3.0r23 or 6.3.0r24, may experience packet drops due to ASIC reinitializing.  

Solution:
This issue is tracked via PR1282754.  This issue is addressed in ScreenOS 6.3.0r23b and ScreenOS 6.3.0r24b from the Juniper Software Download page.

Download ScreenOS Software

1. Go to http://www.juniper.net/support/downloads
2. Select your product
3. Click the "Software" tab
4. Select the Install Package, and follow the online prompts

Workaround

This problem can be worked around by applying the command:

unset flow tcp-syn-check strict