18.4R3-S5: Software Release Notification for JUNOS Software Version 18.4R3-S5

Junos Software service Release version 18.4R3-S5 is now available.

18.4R3-S5 - List of Fixed issues

PR Number	Synopsis	Category: EX4300 PFE
1456879	The traffic for some VLANs might not be forwarded when vlan-id-list is configured Product-Group=junos	On EX4300 Series switches, if the vlan-id-list is used on one interface, the traffic for some VLANs under the vlan-id-list might not be forwarded.
PR Number	Synopsis	Category: EX2300/3400 PFE
1427075	VC split after network topology changed Product-Group=junos	In Virtual Chassis scenario, when the interfaces flaps or VLAN configuration is changed frequently, the network topology will be changed accordingly, then CPU utilization will be dramatically increased to very high within a short time, which might cause the failure of essential communications between VC primary and members. When the failure happens, FPC will automatically restart. As a result, VC is split and traffic is lost.
PR Number	Synopsis	Category: QFX Access control list
1403001	Filter install will be failed due to no resource Product-Group=junos	QFX5120 will show as "No resources for operation " during installing filter QFX5120 switches with VXLAN configured, user configured ACLs are limited to only one type (iRACL, iVACL or iPACL). But in this case there is only IPACL no other filter config
1514570	Scale of filters with egress-to-ingress command is enabled. Product-Group=junos	With the 'egress-to-ingress' knob enabled, the filter installation fails if the number of filter entries configured is more than 1K.
1521763	Firewall "sample" configuration gives the warning as unsupported on QFX10002-36q and will not work. Product-Group=junos	On QFX10002-36q, when inline-jflow is configured, the IPv4 firewall filter with 'sample' action gives a waring "unsupported platform" and will not work. On the other hand, the IPv6 firewall filter with 'sample' action will still work as expected.
PR Number	Synopsis	Category: BBE Remote Access Server
1517507	GX-PLUS: CCR-T doesn't contain the Usage Monitoring information Product-Group=junos	On subscriber termination, CCR-T is sent to the PCRF server reporting the same. But this doesn't contain the Usage monitoring information.
1518016	JUNOS CLI [show network-access aaa subscribers statistics username "<>"] fails to fetch Subscriber-specific AAA statistics information if an subscriber username includes space Product-Group=junos	Subscriber username with space in between is not displayed by [show network-access aaa subscribers statistics username "<>"] command
PR Number	Synopsis	Category: QFX Access Control related
1515972	"dot1x" memory leak Product-Group=junos	Memory leak is seen in 'dot1xd' daemon when no 'dot1x' is configured. Memory leak is seen for the allocation while creating socket from 'dot1xd' daemon to 'authd' daemon. If 'authd' is not running , 'dot1xd' daemon tries to connect to 'authd' periodically and every time it was allocating memory for string "/var/run/authd_control" for socket creation. The memory does not free in this scenario and we see memory leak for string "/var/run/authd_control". There will be no service impact to other services/daemons other than dot1x.
PR Number	Synopsis	Category: EVPN Layer-2 Forwarding
1520078	Unable to create a new VTEP interface Product-Group=junos	In all platforms with VXLAN Static VTEP tunnels scenario (including Static VXLAN without EVPN), after RE switchover or restart of l2-learning, if create a new VTEP interface, the interface may not work.
1521199	The l2ad process might crash when EVPN-DCI session is teared down by MP-BGP-EVPN peer Product-Group=junos	On EVPN-VXLAN scenario, when EVPN-DCI session is teared down by MP-BGP-EVPN peer, the l2ald process might crash with a core file generated in all VTEPs. It might cause total EVPN-VXLAN fabric bring down and entire network impact.
PR Number	Synopsis	Category: Express PFE CoS Features
1509220	Traffic might be affected on QFX10002/QFX10008/QFX10016 platform Product-Group=junos	On QFX10002/QFX10008/QFX10016, on the interfaces which map to h/w stream 0, if enhanced transmission selection (ETS), which in JunOS implementation is Hierarchical port scheduling configurations, change while high rate traffic is flowing, the chip might be wedged, thus no traffic flow is seen. Hierarchical port scheduling is the Junos OS implementation of enhanced transmission selection (ETS), as described in IEEE 802.1Qaz.
PR Number	Synopsis	Category: Internet Group Management Protocol
1520059	Packet loss might be observed while verifying traffic from access to core network for IPv4/IPv6 interfaces Product-Group=junos	On EX2300-48T/EX2300-48P/EX2300-48MP, packet loss may be seen when L3 IPv4/IPv6 interface and route related configurations with IPv4/IPv6 unicast stream are configured. This issue might cause traffic drop. This issue happens if two different NH(Next Hop) IDs are programmed in the Hardware for same route but only one entry is maintained in the software.This issue is specific to 48 port EX2300 platforms and will not occur on other 12/24 ports EX2300, such as EX2300-24T, EX2300-24P, EX2300-24MP.
PR Number	Synopsis	Category: Kernel software for AE/AS/Container
1474300	A new aggregated Ethernet member interface for a static LAG bundle is installed in the FIB even though the micro- BFD session is down. Product-Group=junos	On all Junos platforms, if a static Link Aggregate Group (LAG) is configured, and Bidirectional Forwarding Detection (BFD) is enabled on the LAG which is also called as micro BFD, a newly added member link might start to forward traffic immediately when the configuration change commits even though its micro BFD session is still down, for example, add a new member interface only on single end, and the remote member interface is disabled or not added. Therefore, traffic loss might be seen due to this issue.
PR Number	Synopsis	Category: jdhcpd daemon
1525052	The memory leak in jdhcpd might be seen if access-profile is configured under "dhcp-relay" or "dhcp-local-server" stanza Product-Group=junos	With access-profile being configured under "forwarding-options dhcp-relay" or "system services dhcp-local-server" stanza, there might be memory leak in jdhcpd when DHCP request is processed. The leaked memory size for each processing will be the number of bytes equal to the length of the access profile.
PR Number	Synopsis	Category: Firewall Policy
1500938	The srxpfe/flowd process might crash due to memory corruption within JDPI Product-Group=junos	On SRX/MX platforms, if there are any services (e.g. AppID, IDP, APBR and so on) running based on Juniper Deep Packet Inspection (JDPI), when the work load is reaching heavy level, for example, above 50% of max connection per second for Layer 7 security policy, or 30% for IDP, the srxpfe/flowd process might crash due to memory corruption caused by this issue.
PR Number	Synopsis	Category: jsscd daemon
1511745	Static subscribers are logged out after creating a unit under demux0 interface Product-Group=junos	In MX platforms with static subscriber scenario, the existing static subscribers associated to a demux0 interface might be forced to log out after creating another unit under demux0 interface.
PR Number	Synopsis	Category: Issues related to Jflow Jvision Sensors
1477445	Sampling process might crash when the MPLS or MPLS over the UDP traffic is sampled. Product-Group=junos	When inline-jflow is configured for sampling MPLS traffic, multi-svcs process running on the FPC may crash (which will lead to FPC crash and restart) due to MPLS resend flow referencing to an unavailable memory location.
PR Number	Synopsis	Category: Multiprotocol Label Switching
1517018	The rpd might crash after upgrading Junos software release from pre 18.1 to 18.1 onwards Product-Group=junos	On all Junos platforms, the rpd might continuously crash after upgrading Junos software release from pre 18.1 to 18.1 onwards while graceful-restart and RSVP/static LSP are configured. This is because there is a change in the data structure written to the restart db file from 18.1 onwards. So, when rpd comes up and tries to read the restart db file written by pre 18.1 release image, the rpd might crash.
PR Number	Synopsis	Category: Multicast Routing
1443713	PIM (S,G) joins might cause MSDP to incorrectly announce source active messages in some cases. Product-Group=junos	In the event of a network running: 1) a first-hop PIM router also being a rendez-vous point (RP); and 2) anycast RP in conjunction with MSDP; and 3) any-source multicast; and 4) a PIM last-hop router sending an (S,G) join when there is no traffic in the network matching the source and group, the first-hop RP will incorrectly send MSDP source-active messages to other MSDP peers. In other cases such as when the RP is not the first-hop PIM router, the traffic source needs to originate packets before the RP would originate MSDP source-active messages.
PR Number	Synopsis	Category: FreeBSD Kernel Infrastructure
1450093	EX4300 : CLI config "on-disk-failure" is not supported Product-Group=junos	On an EX4300 switch, the CLI configuration "set chassis routing-engine on-disk-failure disk-failure-action (reboot \| halt)" is not supported.
PR Number	Synopsis	Category: Express Paradise PFE Sflow
1525589	PTX10002-60C / PTX1K - SFLOW Adaptive-sampling with rate limiter knob enabled crosses sample rate 65535 Product-Group=junos	'show sflow Interfaces' command displays wrong adaptive-sampling rates for rate limiter configuration. The display usually shows a sampling rate of more than 65535.
PR Number	Synopsis	Category: Interface related issues. Port up/down, stats, CMLC , serdes
1462748	On the QFX5100 switches, the interface output counter is double counted for self-generated traffic. Product-Group=junos	On QFX5100 device, interface output counter is double counted for self-generated traffic
PR Number	Synopsis	Category: QFX Platform related (SYSLOG/ALARMS/miscellaneous)
1317750	Port LEDs do not work on the QFX5100 switch in QFX5110-QFX5100 mixed mode Virtual Chassis. Product-Group=junosvae	Port LEDs on the QFX5100 do not work. If a device connects to a port on the QFX5100, the port LED stays unlit.
PR Number	Synopsis	Category: QFX L2 PFE
1510329	ARP replies might be flooded through the EVPN-VXLAN network as unknown unicast ARP reply. Product-Group=junos	The QFX5100/5110/5120/5200 platforms configured as EVPN-VxLAN leaf, the leaf will send periodic ARP requests to connected hosts to refresh the mac-ip entry when proxy-arp and suppression are enabled. These ARP replies are being processed by the leaf, however, they are also being flooded further through the EVPN-VxLAN network as unknown unicast ARP reply. This issue may decrease the bandwidth efficiency of the core network.
PR Number	Synopsis	Category: QFX EVPN / VxLAN
1516653	The MAC learning might not work properly after multiple MTU changes on the access port in VxLAN scenario Product-Group=junosvae	On QFX5120 platform running with Virtual Extensible LAN protocol (VxLAN) scenario, if there are multiple iterations of MTU change on the access port which faces Customer Edge (CE) side, for example, 20 iterations under the scale with around 100 VLAN to VXLAN Network Identifier (VNI) mapping, the MAC learning on the access port might not be able to work properly due to this issue.
PR Number	Synopsis	Category: QFX VC Infrastructure
1497563	Virtual Chassis is not stable with 100-Gigabit Ethernet and 40-Gigabit Ethernet interfaces. Product-Group=junos	In QFX5110 platform with Virtual Chassis (VC) scenario, VC might not get formed and can cause traffic loss if the 100G VCP ports are deleted and created, or changed from 40G to 100G or vice-versa. For the reason is that Forward Error Correction (FEC) should not be enabled when the physical interface is working as a VCP port.
PR Number	Synopsis	Category: RPD Interfaces related issues
1503075	Fabric interface might be Monitored down after chassis cluster reboot Product-Group=junos	On all SRX series devices with chassis cluster enabled, Fabric link might be Monitored down after rebooting both nodes simultaneously. This can cause CS(Cold Sync monitoring) and FL(Fabric Connection monitoring) failure.
PR Number	Synopsis	Category: Remote Access VPN issues on SRX
1442145	With NCP remote access solution, in a PathFinder case (for example, where IPsec traffic has to be encapsulated as TCP packets), TCP encapsulation for transit traffic is failing. Product-Group=junos	With the NCP remote access solution, where IPsec traffic has to be encapsulated as TCP packets, TCP encapsulation for transit traffic is failing.
PR Number	Synopsis	Category: SSL Proxy functionality on JUNOS
1516903	The srxpfe/flowd process might crash when SSL-Proxy is used Product-Group=junos	On all SRX Series devices with SSL-Proxy used, memory leak might occur when new session creation refers to the SSL-Proxy profile, which results in a corrupted memory accessed and the flowd/srxpfe process crash.
PR Number	Synopsis	Category: MX10003/MX204 Platform SW - Chassisd s/w defects
1315577	MX10003 : Despite of having all AC low PEM alarm is raised. Product-Group=junosvae	An alarm is raised if mixed AC PEMs are present. This occurs because the criteria for checking whether mixed AC is present was changed.
PR Number	Synopsis	Category: SRX-1RU platfom related protocol, QoS, filtering features et
1515046	VRRP does not work on reth interface with a vlan greater than 1023 Product-Group=junos	When a redundant Ethernet (reth) interface has vlan-tagging configured and is part of a VRRP group, the SRX/vSRX is unable to allocate the VIP to the reth interface if the vlan-id configured is greater than 1023. As a result, VRRP does not work.
PR Number	Synopsis	Category: Trio pfe bridging, learning, stp, oam, irb software
1494594	Packets get dropped when next hop is IRB over lt interface. Product-Group=junos	On MX series platforms, when a route's next-hop is an IRB interface with lt- as the underlying L2 interface, it is not getting programmed on PFE, resulting in packet drop.
1501014	Traffic to VRRP virtual IP/MAC might be dropped when ingress queueing is enabled Product-Group=junos	On MX platforms with any MPC in enhanced network-service mode, if VRRP is configured on AE interface, after 'set chassis fpc X pic X traffic-manager mode ingress-and-egress' is enabled, traffic sent to virtual IP/MAC might be dropped and the forward traffic will be affected.
PR Number	Synopsis	Category: Junos Automation, Commit/Op/Event and SLAX
1442248	SRX series devices or vSRX instances/platforms fail to download dynamic-address feed from security director Product-Group=junos	If downloading dynamic-address feed from an HTTPS server that is configured on Security Director is available, then the download process fails. As a result the IP address contained in the list not be sent from Security Director to the platform. If the platform has a policy referencing the IP address, then that policy will not match pass-through traffic.
PR Number	Synopsis	Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1423500	Configuration commit might fail when the file system gets into full state. Product-Group=junos	On all platforms running Junos OS, when the file system gets into the Full state and there is not enough spare disk space, it might get into a problematic system condition while committing the configuration. After that, if the consecutive commits are still done in such a problematic condition, commit-check failure logs might be seen eventually. Due to this issue, some processes might not run even if the configuration is present.
PR Number	Synopsis	Category: MX10K linecard
1510994	The disabled QSPF transceiver might fail to be turned on Product-Group=junos	In the scenario that QSFP is used as a single interface or child link of the AE interface, if the interface is disabled and enabled frequently, the write errors might happen on I2C (Inter-Integrated Circuit) of QSPF. Then the laser of QSFP might not be enabled.

18.4R3-S5 - List of Known issues

PR Number	Synopsis	Category: SFI Infra-structure
1485038	The following error message is observed: IFDE: Null uint32 set vector, ifd and IFFPC: 'IFD Ether uint32 set' (opcode 151) failed continuously in AD with base configurations. Product-Group=junos	EX 9251 Summit-B54 : "IFDE: Null uint32 set vector, ifd and IFFPC: 'IFD Ether uint32 set' (opcode 151) error message is observed continuously in AD with base configurations.
PR Number	Synopsis	Category: EX2300/3400 platform
1408675	EX3400 PSU status is still taking "check" status even though PSU module has been removed Product-Group=junos	EX3400 PSU status is still taking "check" status even though PSU module has been removed
PR Number	Synopsis	Category: QFX PFE L2
1480132	On QFX5100, fxpc CPU utilization is increased after Broadcom SDK upgrade to 6.5.x from 5.3.x Product-Group=junos	On QFX5100 switches, FXPC CPU utilization is increased due to high number of active ports after third-party (Broadcom ) SDK upgrade to 6.5.x from 5.3.x.
PR Number	Synopsis	Category: QFX L3 data-plane/forwarding
1481987	Multicast traffic loss could be seen in certain conditions while enabling IGMP snooping under EVPN-VXLAN ERB scenario Product-Group=junos	On QFX5110 & QFX5120 platform, which is running as Layer 3 VxLAN gateway, if "igmp-snooping" is enabled in partial but not for all bridge-domains, multicast traffic loss could be observed in non-igmp snooping bridge-domains.
PR Number	Synopsis	Category: ACX MPLS
1456624	On the ACX5448 device, the Layer 2 VPN with the Ethernet encapsulation type stops passing traffic after a random port is added with VLAN configuration. Product-Group=junos	On ACX platform with L2VPN family and encapsulation-type ethernet, there might be packet drops seen after a random port is added with VLAN configuration on the device. The traffic drops are caused due to the egress entry being incorrectly shared between the ethernet-ccc and the vlan-bridging (mapping).
PR Number	Synopsis	Category: ACX Services feature
1504717	Observed core-ripsaw-node-aftd-expr on ACX6360 Product-Group=junos	acx6360: Observed core-ripsaw-node-aftd-expr
PR Number	Synopsis	Category: a20a40 specific issue
1505864	The installation fails when upgrading from legacy Junos to specific BSDx based Junos Product-Group=junos	The installation fails when upgrading from legacy(non-BSDx) Junos to specific BSDx based Junos releases.
1522130	PFE_FLOWD_SELFPING_PACKET_LOSS error messages reported for CP SPU Product-Group=junos	Syslog reporting "PFE_FLOWD_SELFPING_PACKET_LOSS: Traffic impact: Selfping packets loss/err: 300 within 600 second" error messages in node0 and node1 CP
PR Number	Synopsis	Category: Border Gateway Protocol
1517498	The rpd might crash after deleting and re-adding a BGP neighbor Product-Group=junos	In BGP scenario on all Junos platforms, after deleting and re-adding a BGP neighbor, the rpd might crash due to a rare timing issue.
PR Number	Synopsis	Category: Control Plane for Node Virtualization
1451215	Main chassisd thread at a JNS GNF might experience stalls upon GNF SNMP polling for hardware-related OIDs. Product-Group=junos	- Chassisd main thread stalls could be seen at a JNS GNF upon GNF SNMP polling for HW-related OIDs (e.g. ones from jnxBoaAnatomy MIB). - If a GNF chassisd main thread stalls are ongoing and the GNF is restarted, then a service MGD process at the BSYS could start spinning at 100% CPU. This MGD process won't terminate by itself and will be consuming 100% CPU even when the GNF is back online.
PR Number	Synopsis	Category: EVPN Layer-2 Forwarding
1408840	In an Ethernet Virtual Private Network-Virtual Extensible LAN scenario with scaled bridge domains configured (for example, 4000 bridge domains), if the core-facing link on the VXLAN tunnel endpoint (VTEP) comes up (Down >> Up), the traffic received from the customer edge (CE) might be dropped by the VTEP for a period of time before it becomes normal. Product-Group=junos	In a EVPN-VXLAN scenario with scaled Bridge Domains configured (for example, 4000 Bridge Domains), if the core facing link on the VTEP (VXLAN Tunnel Endpoint) comes up (Down >> Up), the traffic received from the CE (Customer Edge) might be dropped by the VTEP for a period of time before it becomes normal.
PR Number	Synopsis	Category: Sflow on qfx10k/ptx series PRs for defect & enhancement req
1475082	The sFlow could not work correctly if the received traffic goes out of more than one interface. Product-Group=junos	On QFX10K platforms, if the traffic which is received from AE bundle go out of more than one interface, the sflow might work incorrectly.
PR Number	Synopsis	Category: Express PFE MPLS Features
1515092	The routes update might fail upon HMC memory issue and traffic impact might be seen Product-Group=junos	On PTX Series and QFX Series devices, in rare cases, HMC memory error might cause routes update failure and traffic impact on the Packet Forwarding Engine.
PR Number	Synopsis	Category: Stateful firewall and NAT
1433063	NTAD daemon running in 32bit mode (the only possible mode in current implementation) is not compatible with RPD running in 64bit mode Product-Group=junos	Currently NTAD daemon can run only in 32bit mode. To have NTAD running, RPD has to run in 32bit mode too. If RPD runs in 64bit mode, then NTAD will crash cyclically once started. After 4th crash NTAD won't be automatically restarted. This problem has no fix currently.
PR Number	Synopsis	Category: to track replication related interface bugs
1372087	If you perform GRES with the interface em0 (or fxp0) disabled on the primary Routing Engine, when you enable the interface on the new backup Routing Engine, you might not be able to access the network. Product-Group=junos	If performing GRES with the interface em0 (or fxp0) disabled on the primary RE, then enabling the interface on the new backup RE, it isn't able to access network.
PR Number	Synopsis	Category: Libjtask for RPD tasks, scheduler, timers, memory, and slip
1463368	Need to add the Backport jemalloc profiling CLI support to all Junos OS Releases where jemalloc is present. Product-Group=junos	Backport jemalloc profiling CLI support to all releases where jemalloc is present.
PR Number	Synopsis	Category: ISIS routing protocol
1526447	ISIS LSP database Sync issue while using Flood group feature Product-Group=junos	On a Junos platform, when flood-group is configured on any interface & after isis adjacency flap, the device is sending only self-generated LSPs & not incrementing the LSP updates received from neighbor which flapped. This is causing LSP database out of sync.
PR Number	Synopsis	Category: Flow Module
1467654	TCP session might not time out properly upon receiving TCP RESET packet Product-Group=junos	TCP session cannot time out properly upon receiving the TCP RESET packet, and the session timeout does not change to two seconds.
PR Number	Synopsis	Category: Firewall Policy
1454907	Traffic might be dropped when policies are changed in SRX Series devices Product-Group=junos	If a huge number of policies are configured on SRX Series devices and some policies are changed, the traffic that matches the changed policies might be dropped.
PR Number	Synopsis	Category: Security platform jweb support
1493601	Infinite loading circle may be encountered via J-Web on SRX platforms Product-Group=junos	On SRX platforms, infinite loading circle may be encountered on J-Web after navigating new page when the page is still rendering.
PR Number	Synopsis	Category: Label Distribution Protocol
1521698	LDP session-group may through the commit error on EVO platforms and keeps flapping in MX platform. Product-Group=junos	Customers may experience below issues addressed in this PR. --- Configuration of "protocols ldp session-group" on EVO platform may through commit failure error. --- LDP session keeps flapping on MX power PPC platform upon adding authentication key in ldp session-group.
PR Number	Synopsis	Category: sflow on MX PRs for defect & enhancement requests
1487876	Incorrect 'frame length' of 132 bytes might be captured in packet header Product-Group=junos	On all MX/PTX5k/EX platforms with Trio based line cards, if a packet is send with more than 128 bytes it will always show incorrect "Frame length" of 132 bytes in raw packet header of sflow collector captured data.
PR Number	Synopsis	Category: PE based L3 software
1500798	BFD sessions flap after deactivating or activating the aggregated Ethernet interface or executing GRES. Product-Group=junos	On QFX10008 platforms, if the BFD is configured over an AE interface (member link across multiple FPCs), deactivating/activating the AE interface or executing GRES will cause the BFD sessions to flap.
PR Number	Synopsis	Category: QFX PFE Class of Services
1430173	The CoS rewrite rules applied under an aggregated Ethernet interface might not take effect after NSSU. Product-Group=junos	On QFX 5K platform, Class of Service (CoS) rewrite rules applied under an Aggregated Ethernet (AE) interface might not take effect after Non-Stop Software Upgrade (NSSU). In the end, packets could not enter into correct queues for sending.
PR Number	Synopsis	Category: RPD Next-hop issues including indirect, CNH, and MCNH
1407408	The process rpd crash may be observed once a non-forwarding path is used for re-resolution Product-Group=junos	The process rpd might crash after a non-forwarding route (that is, a route to an indirect next-hop association is a non-forwarding indirect next- hop) which is received from multiple protocols is resolved again by using the non-forwarding path.
PR Number	Synopsis	Category: RPD route tables, resolver, routing instances, static routes
1421566	Some LDP routes in VRF cannot be resolved over inet.3 table. Product-Group=junos	Some LDP routes in VRF (e.g. foo.mpls.0) cannot be resolved over inet.3 table, which makes these LDP routes hidden.
PR Number	Synopsis	Category: Generic platform and infra issues for MS-MIC and MS-MPC(XLP)
1482400	The vmcore crash sometimes along with mspmand crash might happen on MS-MPC/MS-MIC if large-scale traffic flows are processed by it Product-Group=junos	With NAT/Stateful-firewall/TCP tickle (enable by default) configured on MS-MPC/MS-MIC, the vmcore crash sometimes along with mspmand crash might happen if large-scale traffic flows (e.g. million flows) are processed by it.
PR Number	Synopsis	Category: Trio pfe l3 forwarding issues
1472587	MX10003/MX204 BFD/LACP may flap during BGP convergence Product-Group=junos	During BGP converence, eg full internet table load, the BFD and LACP protocol on the router may flap
PR Number	Synopsis	Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1452136	The mgd might crash when you use the replace pattern command. Product-Group=junos	When you use the "replace pattern" command to replace the name in the apply-group, the mgd crashes.
PR Number	Synopsis	Category: For GPRS security features on highend SRX series
1526801	GTP traffic dropped when enable-gtpu-distribution is configured Product-Group=junos	On SRX5k platform, when GTP Distribution (enable-gtpu-distribution) is configured without GTP Inspection enabled on the security policies, the GTP traffic is not getting distributed and traffic may get dropped. This issue exists from Junos 18.1 until Junos 19.1 and the fix is in Junos 19.2R1 and all higher releases.

Knowledge Base

18.4R3-S5 - List of Fixed issues

18.4R3-S5 - List of Known issues