Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SRX] UTM support in HA for SRX



Article ID: KB17492 KB Last Updated: 05 Jun 2020Version: 7.0

This article provides information about support for Universal Threat Management (UTM) while using SRX chassis clusters.



SRX HA chassis clusters support two modes of setup: Active/Passive and Active/Active.

  • Active/passive mode: In active/passive mode, transit traffic passes through the primary node while the backup node is used only in the event of a failure. When a failure occurs, the backup device becomes the primary and takes over all forwarding tasks.

  • Active/active mode: In active/active mode, transit traffic passes through both nodes of the cluster all the time.



Chassis cluster deployments support Universal Threat Management (UTM) with Active/Passive and Active/Active setup modes in the following Junos OS versions: 

HA Deployment type UTM Feature Supported Junos version
Active/Passive ALL All current
Active/Active Content Filtering All current
URL Filtering -  Redirect All current
URL Filtering - Local All current
URL Filtering - Enhanced 19.4R1
Anti-Spam All current
Anti-Virus (Sophos-engine) 19.4R1
Anti-Virus (Express engine) 11.4 until 12.3X48
Anti-Virus - (Kaspersky engine) 11.4 until 12.3X48

Example of Active/Passive:

root@NODE1> show chassis cluster status 
Cluster ID: 5 
Node                  Priority          Status    Preempt  Manual failover

Redundancy group: 0 , Failover count: 1
    node0                  10           secondary     n/a       no
    node1                 100           primary        no       no  

Redundancy group: 1 , Failover count: 1
    node0                  10           secondary      n/a      no 
    node1                 100           primary         no      no  

Note: If you are performing a manual failover, make sure to issue the same failover for all redundancy groups.


Modification History:

2020-06-05: Updated article to reflect support options for UTM use in HA clusters


Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search