Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

Juniper products support of Kaspersky Labs products

0

0

Article ID: KB32050 KB Last Updated: 25 Oct 2020Version: 6.0
Summary:

This article explains which Juniper devices include support for Kaspersky Labs products and how to remove Kaspersky Labs software, where applicable.

Solution:

Kaspersky Labs anti-virus is supported as an integrated AV solution in the following hardware and software platforms:

 

Platform
OS Version
SRX100H/H2
9.5 through 12.3X48
SRX110H/H2
12.1X44 through 12.3X48
SRX210H/H2
9.5 through 12.3X48
SRX220H/H2
10.4 through 12.3X48
SRX240H/H2
9.5 through 12.3X48
SRX550M
12.1 through 12.3X48
SRX650
9.5 through 12.3X48
LN1000 *See Note1
SSG5
5.4.0 through 6.3.0
SSG20
5.4.0 through 6.3.0
SSG140 
5.4.0 through 6.3.0
SSG320M
6.0.0 through 6.3.0
SSG350M
6.0.0 through 6.3.0
SSG520M
5.4.0 through 6.3.0
SSG550M
5.4.0 through 6.3.0
       NOTE1:  While LN1000 devices do not include an option for enabling Kaspersky Antivirus, the Junos versions used by LN1000 devices do contain Kaspersky Labs code.

Kaspersky Lab anti-virus software may be removed under the following software versions:

  • Junos 15.1X49 or higher versions
    • No action necessary: Kaspersky Labs software is not included in any platforms

  • Junos versions 12.1X47 – 12.3X48
    • Remove Kaspersky Anti-virus License
    1. Identify the license number corresponding to av_key_kaspersky_engine.
      Example:

      root@p04-40> show system license 
      License usage: 
                                       Licenses     Licenses    Licenses    Expiry
        Feature name                       used    installed      needed 
        av_key_kaspersky_engine               0            1           0    2018-09-14 17:00:00 PDT
        anti_spam_key_sbl                     1            0           1    52 minutes
        dynamic-vpn                           0            2           0    permanent
        ax411-wlan-ap                         0            2           0    permanent
        logical-system                        0            1           0    permanent

      Licenses installed: 
        License identifier: JUNOS952568
        License version: 4
        Valid for device: AE4609AA0424
        Features:
          av_key_kaspersky_engine - Kaspersky AV
            date-based, 2017-09-14 17:00:00 PDT - 2018-09-14 17:00:00 PDT​

       
    2.  Delete located license key by issue the following command
      root@p04-40> request system license delete JUNOS952568
      
      Delete license JUNOS952568 ? [yes,no] (no) yes  

    3. Restart device
      root@p04-40> request system reboot
      
      Reboot the system ? [yes,no] (no) yes

Kaspersky Lab anti-virus software may be disabled for use in the following software versions

NOTE: Disabling use of Kaspersky Lab anti-virus for the following software versions will not remove the code from the product.
  • Junos versions 12.1X46 and earlier codes

  • ScreenOS
    • Remove Kaspersky Anti-virus License
      ssg550(B)-> exec license-key delete av_v2_key

Recommendations:

  • For SRX devices running 12.1X46 or earlier versions of Junos, Juniper recommends upgrading to Junos version 12.3X48 or higher releases if removal of Kaspersky Labs code is required.
    Applicable Devices available for upgrade from 12.1X46 or earlier releases include:
    SRX5k series, SRX1400, SRX3k series, SRX650, SRX550, SRX110-SRX240 (2gb H2/HE2 models)
  • For SRX devices running 12.1X46 or earlier versions of Junos that are unable to upgrade to Junos version 12.3X48, Juniper recommends upgrading to the latest generation of SRX devices if removal of Kaspersky Labs code is required.
    Applicable Devices unavailable for upgrade to 12.3X48 or higher releases include:
    SRX100B, SRX100H, SRX110H-VA, SRX110HVB, SRX210B, SRX210BE, SRX210H, SRX210H-POE, SRX210HE, SRX210HE-POE, SRX220H, SRX220H-POE, SRX240B, SRX240B2, SRX240H, SRX240H-POE, SRX240H-DC, LN1000-V, LN1000-CC
  • For ScreenOS devices, Juniper recommends upgrading to the latest generation of SRX devices if removal of Kaspersky Labs code is required.

For more information, please see Comparison of Sophos Antivirus to Kaspersky Antivirus.
Modification History:

2017-09-26: Added a table of products and OS versions where Kaspersky is included. Also added steps for removing the license.
2018-01-31: Modified supported software for SRX100H2,SRX210H2 and SRX220H2 in SOLUTION section (12.1X46->12.3X48). 
2020-09-21: Content re-reviewed, and no changes are required
2020-10-25: Removed EOS product references.

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search