Description

In the 12.1X44-D20+ Junos code, there is a new command, "set security idp sensor-configuration flow drop-on-failover" What does this command do?

Symptoms


Solution


In the case of an HA failover, existing flows are not inspected by the new active node IDP. This knob ensures that existing flows are either inspected or dropped by IDP.