Description

This article explains the steps to migrate from the existing Juniper Enhanced Web filtering to the Juniper NextGen Web filtering 

Symptoms

Under the show system license, the NG license installed will show feature used as 0


root@host> show system license

License usage:

Licensed   Licensed  Licensed

                  Feature   Feature   Feature

Feature name             used  installed   needed  Expiry

idp-sig                 1       2       0   2028-10-10 05:30:00 IST

av_key_sophos_engine         1       2       0   2028-10-10 05:30:00 IST

wf_key_websense_ewf          1       1       0   2026-02-14 05:30:00 IST

wf_key_ng_juniper            0       2       0   2028-10-10 05:30:00 IST


Solution

Starting in Junos OS Release 23.4R1, the Juniper NextGen Web Filtering feature with wf_key_ng_juniper key could be used. Customers using the Enhanced Web Filtering (EWF) have an option to manually migrate from the existing EWF to the NGWF.

 

During new installs or in case of an upgrade, the wf_key_ng_juniper key is installed. Juniper NextGen Web Filtering and URL category download and installation work when wf_key_websense_ewf or wf_key_ng_juniper is present.

 

Use the following command to migrate the existing Juniper Enhanced Web filtering to the Juniper NextGen Web filtering 

 

user@host> request security utm web-filtering category migrate-to-ng-juniper

 

Use the following command to check the category migration status:

 

show security utm web-filtering category migrate-to-ng-juniper status Category migration status:

Status: Migration is In-progress

 

show security utm web-filtering category migrate-to-ng-juniper status Category migration status:

Status: Migration is Successful

 

Note: Once the migration is completed, delete/replace the old type: juniper-enhanced configurations and add the new configuration with type: ng-juniper

Modification History

2026-02-02 : Article Created

2026-07-26 : Post migration requirement added