NSM Upgrade

[harrydanger]

All,

Ive noticed our NSM is out of date somewhat, running 2008.2r1

Is there much that would inspire an upgrade to 2010?

A.

[CN]

If you are considering upgrading to 2010.1, then I would suggest using the latest patch on 2010.1 and the links are below

https://download.juniper.net/software/nsm/2010.1a17/md5sum.txt

https://download.juniper.net/software/nsm/2010.1a17/nsm2010.1a17_servers_linux_x86.zip

https://download.juniper.net/software/nsm/2010.1a17/nsm2010.1a17_servers_sol_sparc.zip

https://download.juniper.net/software/nsm/2010.1a17/nsm2010.1a17_ui_win_x86.zip

https://download.juniper.net/software/nsm/2010.1a17/nsm2010.1a17_ui_linux_x86.zip

515115	Traffic and Attack logs are not updating in the NSM log viewer.
516478	NSM - Tunnel Interfaces are not available for use in VPNs
228510	Multi-line Banner verification is failing on update
502166	Viewing auditlog details crashes NSM Gui
489258	new devSvr crashes reported by NATO
465850	IDP 5.0 image upload fails to NSM with error "Upgrade Path not supported"
509454	NSM mishandle rules with duplicate IDs
513017	Invalid Errors observed at Dynamic Profiles for M device with Schema 525 & firmware 10.2B1
513058	Invalid errors observed at Dynamic Profiles -> Interface -> Unit -> Filter with 10.2B1 firmware & 525 Schema
515796	Virtual-chassis check box is grayed out for SRX-VC at NSM UI.
514016	Duplicate address objects gets created even for the unchanges addresses when policy is imported from device.
497349	SAMR2: Getting a Failure error message  while vlaidating J/SRX devices, through NSM -> Devices -> Configuration- > Validate Devices (s).
512293	MIP IP must be in the same subnet as interface IP
513441	Invalid Errors observed at "Logical Systems" & "Dynamic Profiles" for a M device with 10.1R1.8 & schema 528
513753	Importing IPv6 address objects from SRX device shows null error.
499688	Cannot remove IDP platfrom from custom IDP attack signature using NSM GUI
502223	NSM does not import dhcp DNS Server options correctly and attempts to unset them on device
499748	API GetPacketDataRequest error with VLAN traffic
495027	Power failure on active guiSvr causes 7-10 minute delay before devSvr connects to active guiSvr
511115	NSM patch to perform sanity check: now the client must be the same patch build as the server
513051	RLI-324: Virtual Chassis Representation Of SRX Clusters
500367	Random NSM policy update failed error caused by Java NullPointer Exception
512713	after running import admin directive, configuration on NSM is incorrectly changed
466608	NSM is unsetting VPNs proxy-id local-id when template and device config are merged.
501875	SRX devices show disconnected if Gui Server fails over
504195	NSM is not expanding the window for router-instance routes
499064	NSM Gui Server crashed with Mutex Lock Event
501095	Address object -error message not shown if the comment length exceeds 31 in 2009.1r1
509893	Incorrect parameters in the Certificate
498554	HaSvr not stopped at system shutdown
500838	Timeout defined in custom service object does not get updated to SRX device
504414	NSM does not allow custom service object with program-id and UDP

Thanks,
Chandra

[harrydanger]

thanks,

but is it a worth while upgrade?

[mnarine]

It depends, at least in my opinion.

What devices are you managing with the NSM and are you currently experiencing any issues?  Take a look at the release notes for 2010.x to determine if the upgrade is worth your efforts.  Most likely it is. I have a few customers using it and they have notice an increase in speed for the WebUI.

-Mike

[SomeITGuy]

things slowed down in 2009 so I am not sure SPEED will improve in 2010 over 2008.

There are a hell of a lot of bug fixes between 2008 and 2010 however also note the MINIMUM supported ScreenOS and JunOS versions that can be managed before upgrading.. you may have to update some devices before hand..

The biggest reason to update is normally to manage NEW devices.. the biggest changes are coming around JunOS, ScreenOS changes are minimal to none.