[SRX] UTM support in HA for SRX

Summary:

This article provides information about support for Universal Threat Management (UTM) while using SRX chassis clusters.

Symptoms:

SRX HA chassis clusters support two modes of setup: Active/Passive and Active/Active.

Active/passive mode: In active/passive mode, transit traffic passes through the primary node while the backup node is used only in the event of a failure. When a failure occurs, the backup device becomes the master and takes over all forwarding tasks.
Active/active mode: In active/active mode, transit traffic passes through both nodes of the cluster all the time.

Solution:

Chassis cluster deployments support Universal Threat Management (UTM) with Active/Passive and Active/Active setup modes in the following Junos OS versions:

HA Deployment type	UTM Feature	Supported Junos version
Active/Passive	ALL	All current
Active/Active	Content Filtering	All current
	URL Filtering - Redirect	All current
	URL Filtering - Local	All current
	URL Filtering - Enhanced	19.4R1
	Anti-Spam	All current
	Anti-Virus (Sophos-engine)	19.4R1
	Anti-Virus (Express engine)	11.4 until 12.3X48
	Anti-Virus - (Kaspersky engine)	11.4 until 12.3X48

Example of Active/Passive:

{primary:node1}
root@NODE1> show chassis cluster status 
Cluster ID: 5 
Node                  Priority          Status    Preempt  Manual failover

Redundancy group: 0 , Failover count: 1
    node0                  10           secondary     n/a       no
    node1                 100           primary        no       no  

Redundancy group: 1 , Failover count: 1
    node0                  10           secondary      n/a      no 
    node1                 100           primary         no      no

Note: If you are performing a manual failover, make sure to issue the same failover for all redundancy groups.

Modification History:

2020-06-05: Updated article to reflect support options for UTM use in HA clusters

Knowledge Base