Management
Reply
Trusted Contributor
harrydanger
Posts: 86
Registered: ‎03-13-2009
0

NSM Upgrade

All,

 

Ive noticed our NSM is out of date somewhat, running 2008.2r1

 

Is there much that would inspire an upgrade to 2010?

 

A.

Recognized Expert Recognized Expert
Recognized Expert
CN
Posts: 316
Registered: ‎10-28-2008
0

Re: NSM Upgrade

If you are considering upgrading to 2010.1, then I would suggest using the latest patch on 2010.1 and the links are below

 

https://download.juniper.net/software/nsm/2010.1a17/md5sum.txt

https://download.juniper.net/software/nsm/2010.1a17/nsm2010.1a17_servers_linux_x86.zip

https://download.juniper.net/software/nsm/2010.1a17/nsm2010.1a17_servers_sol_sparc.zip

https://download.juniper.net/software/nsm/2010.1a17/nsm2010.1a17_ui_win_x86.zip

https://download.juniper.net/software/nsm/2010.1a17/nsm2010.1a17_ui_linux_x86.zip

 

515115

Traffic and Attack logs are not updating in the NSM log viewer.

516478

NSM - Tunnel Interfaces are not available for use in VPNs

228510

Multi-line Banner verification is failing on update

502166

Viewing auditlog details crashes NSM Gui

489258

new devSvr crashes reported by NATO

465850

IDP 5.0 image upload fails to NSM with error "Upgrade Path not supported"

509454

NSM mishandle rules with duplicate IDs

513017

Invalid Errors observed at Dynamic Profiles for M device with Schema 525 & firmware 10.2B1

513058

Invalid errors observed at Dynamic Profiles -> Interface -> Unit -> Filter with 10.2B1 firmware & 525 Schema

515796

Virtual-chassis check box is grayed out for SRX-VC at NSM UI.

514016

Duplicate address objects gets created even for the unchanges addresses when policy is imported from device.

497349

SAMR2: Getting a Failure error message  while vlaidating J/SRX devices, through NSM -> Devices -> Configuration- > Validate Devices (s).

512293

MIP IP must be in the same subnet as interface IP

513441

Invalid Errors observed at "Logical Systems" & "Dynamic Profiles" for a M device with 10.1R1.8 & schema 528

513753

Importing IPv6 address objects from SRX device shows null error.

499688

Cannot remove IDP platfrom from custom IDP attack signature using NSM GUI

502223

NSM does not import dhcp DNS Server options correctly and attempts to unset them on device

499748

API GetPacketDataRequest error with VLAN traffic

495027

Power failure on active guiSvr causes 7-10 minute delay before devSvr connects to active guiSvr

511115

NSM patch to perform sanity check: now the client must be the same patch build as the server

513051

RLI-324: Virtual Chassis Representation Of SRX Clusters

500367

Random NSM policy update failed error caused by Java NullPointer Exception

512713

 after running import admin directive, configuration on NSM is incorrectly changed

466608

NSM is unsetting VPNs proxy-id local-id when template and device config are merged.

501875

SRX devices show disconnected if Gui Server fails over

504195

NSM is not expanding the window for router-instance routes

499064

NSM Gui Server crashed with Mutex Lock Event

501095

 Address object -error message not shown if the comment length exceeds 31 in 2009.1r1

509893

Incorrect parameters in the Certificate

498554

HaSvr not stopped at system shutdown

500838

Timeout defined in custom service object does not get updated to SRX device

504414

NSM does not allow custom service object with program-id and UDP

 

Thanks,
Chandra

Trusted Contributor
harrydanger
Posts: 86
Registered: ‎03-13-2009
0

Re: NSM Upgrade

thanks,

 

but is it a worth while upgrade?

Super Contributor
mnarine
Posts: 179
Registered: ‎10-03-2009
0

Re: NSM Upgrade

It depends, at least in my opinion. :smileyhappy:

 

What devices are you managing with the NSM and are you currently experiencing any issues?  Take a look at the release notes for 2010.x to determine if the upgrade is worth your efforts.  Most likely it is. I have a few customers using it and they have notice an increase in speed for the WebUI.

 

-Mike

Trusted Contributor
SomeITGuy
Posts: 330
Registered: ‎01-08-2010
0

Re: NSM Upgrade

[ Edited ]

things slowed down in 2009 so I am not sure SPEED will improve in 2010 over 2008.

 

There are a hell of a lot of bug fixes between 2008 and 2010 however also note the MINIMUM supported ScreenOS and JunOS versions that can be managed before upgrading.. you may have to update some devices before hand..

 

The biggest reason to update is normally to manage NEW devices.. the biggest changes are coming around JunOS, ScreenOS changes are minimal to none.

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.