04-27-2010 03:04 PM
If you are considering upgrading to 2010.1, then I would suggest using the latest patch on 2010.1 and the links are below
Traffic and Attack logs are not updating in the NSM log viewer.
NSM - Tunnel Interfaces are not available for use in VPNs
Multi-line Banner verification is failing on update
Viewing auditlog details crashes NSM Gui
new devSvr crashes reported by NATO
IDP 5.0 image upload fails to NSM with error "Upgrade Path not supported"
NSM mishandle rules with duplicate IDs
Invalid Errors observed at Dynamic Profiles for M device with Schema 525 & firmware 10.2B1
Invalid errors observed at Dynamic Profiles -> Interface -> Unit -> Filter with 10.2B1 firmware & 525 Schema
Virtual-chassis check box is grayed out for SRX-VC at NSM UI.
Duplicate address objects gets created even for the unchanges addresses when policy is imported from device.
SAMR2: Getting a Failure error message while vlaidating J/SRX devices, through NSM -> Devices -> Configuration- > Validate Devices (s).
MIP IP must be in the same subnet as interface IP
Invalid Errors observed at "Logical Systems" & "Dynamic Profiles" for a M device with 10.1R1.8 & schema 528
Importing IPv6 address objects from SRX device shows null error.
Cannot remove IDP platfrom from custom IDP attack signature using NSM GUI
NSM does not import dhcp DNS Server options correctly and attempts to unset them on device
API GetPacketDataRequest error with VLAN traffic
Power failure on active guiSvr causes 7-10 minute delay before devSvr connects to active guiSvr
NSM patch to perform sanity check: now the client must be the same patch build as the server
RLI-324: Virtual Chassis Representation Of SRX Clusters
Random NSM policy update failed error caused by Java NullPointer Exception
after running import admin directive, configuration on NSM is incorrectly changed
NSM is unsetting VPNs proxy-id local-id when template and device config are merged.
SRX devices show disconnected if Gui Server fails over
NSM is not expanding the window for router-instance routes
NSM Gui Server crashed with Mutex Lock Event
Address object -error message not shown if the comment length exceeds 31 in 2009.1r1
Incorrect parameters in the Certificate
HaSvr not stopped at system shutdown
Timeout defined in custom service object does not get updated to SRX device
NSM does not allow custom service object with program-id and UDP
05-05-2010 09:09 AM
It depends, at least in my opinion.
What devices are you managing with the NSM and are you currently experiencing any issues? Take a look at the release notes for 2010.x to determine if the upgrade is worth your efforts. Most likely it is. I have a few customers using it and they have notice an increase in speed for the WebUI.
05-27-2010 10:11 AM - edited 05-27-2010 10:14 AM
things slowed down in 2009 so I am not sure SPEED will improve in 2010 over 2008.
There are a hell of a lot of bug fixes between 2008 and 2010 however also note the MINIMUM supported ScreenOS and JunOS versions that can be managed before upgrading.. you may have to update some devices before hand..
The biggest reason to update is normally to manage NEW devices.. the biggest changes are coming around JunOS, ScreenOS changes are minimal to none.