FSM features available for JunOS devices
- JunOS imports – file based, NCM, and through direct device connectivity
- Device detail views with filtering
- Queries
- Service availability Reports
- Rule Object cleanup – structural and file-based log data
JunOS constructs included
- Address and applications objects, including object hierarchy
- Global objects (must precede objects that reference it)
- Zone to Zone policy
- Global policy
- Source, Destination, and static NAT.
- Filter rules
- Static and dynamic routes
JunOS constructs NOT Included
- Cannot specify deny in route rules
- IPv6 objects
- Deny in route rules
- VPN’s
- Wild-card mask and its usage in policies.
- Routing-instances.
- Loopback interfaces and its usage.
- Usage of “except” keyword for negation.
- Inheriting policies using apply-groups feature.
- Clusters.
- NAT pool with multiple ranges.
Known Issues
- If the route file contains “ > “, then the remainder of the file is skipped. This is because, the device connector also uses “ > “ as the default device prompt. There is a high probability of a JunOS route file containing a ">". The workaround is to enable the checkbox that shows optional parameters and enter the correct device prompt, such as the device name followed by “ > “.
- Pushing of JunOS scripts to SRX devices in a non test environment has some risks since testing has not finished (e.g. regression). Users should save their configurations in case a recovery is needed.
- If “global” is used as the name of an address object following global object declarations are skipped.
- Configuration containing a license block are not imported.
- Some pre-defined applications are not recognized by the translator
- Configuration report does not show static routes in configuration.
- Help pages have not been upddated to include JunOS.
- Release notes have not been updated