Description

This article explains which Juniper devices include support for Kaspersky Labs products and how to remove Kaspersky Labs software, where applicable.

Solution

Kaspersky Labs anti-virus is supported as an integrated AV solution in the following hardware and software platforms:

 

Platform
OS Version
SRX100H/H2
9.5 through 12.3X48
SRX110H/H2
12.1X44 through 12.3X48
SRX210H/H2
9.5 through 12.3X48
SRX220H/H2
10.4 through 12.3X48
SRX240H/H2
9.5 through 12.3X48
SRX550M
12.1 through 12.3X48
SRX650
9.5 through 12.3X48
LN1000 *See Note 1
SSG5
5.4.0 through 6.3.0
SSG20
5.4.0 through 6.3.0
SSG140 
5.4.0 through 6.3.0
SSG320M
6.0.0 through 6.3.0
SSG350M
6.0.0 through 6.3.0
SSG520M
5.4.0 through 6.3.0
SSG550M
5.4.0 through 6.3.0
       NOTE 1 :  While LN1000 devices do not include an option for enabling Kaspersky Antivirus, the Junos versions used by LN1000 devices do contain Kaspersky Labs code.

Kaspersky Lab anti-virus software may be removed under the following software versions:

  • Junos 15.1X49 or higher versions
    • No action necessary: Kaspersky Labs software is not included in any platforms
  • Junos versions 12.1X47 – 12.3X48
    • Remove Kaspersky Anti-virus License
    1. Identify the license number corresponding to av_key_kaspersky_engine.
      Example:

      root@p04-40> show system license 
      License usage: 
                                       Licenses     Licenses    Licenses    Expiry
        Feature name                       used    installed      needed 
        av_key_kaspersky_engine               0            1           0    2018-09-14 17:00:00 PDT
        anti_spam_key_sbl                     1            0           1    52 minutes
        dynamic-vpn                           0            2           0    permanent
        ax411-wlan-ap                         0            2           0    permanent
        logical-system                        0            1           0    permanent

      Licenses installed: 
        License identifier: JUNOS952568
        License version: 4
        Valid for device: AE4609AA0424
        Features:
          av_key_kaspersky_engine - Kaspersky AV
            date-based, 2017-09-14 17:00:00 PDT - 2018-09-14 17:00:00 PDT​

       
    2.  Delete located license key by issue the following command
      root@p04-40> request system license delete JUNOS952568
      
      Delete license JUNOS952568 ? [yes,no] (no) yes  
    3. Restart device
      root@p04-40> request system reboot
      
      Reboot the system ? [yes,no] (no) yes

Kaspersky Lab anti-virus software may be disabled for use in the following software versions

NOTE: Disabling use of Kaspersky Lab anti-virus for the following software versions will not remove the code from the product.
  • Junos versions 12.1X46 and earlier codes
  • ScreenOS
    • Remove Kaspersky Anti-virus License
      ssg550(B)-> exec license-key delete av_v2_key

Recommendations:

  • For SRX devices running 12.1X46 or earlier versions of Junos, Juniper recommends upgrading to Junos version 12.3X48 or higher releases if removal of Kaspersky Labs code is required.
    Applicable Devices available for upgrade from 12.1X46 or earlier releases include:
    SRX5k series, SRX1400, SRX3k series, SRX650, SRX550, SRX110-SRX240 (2gb H2/HE2 models)
  • For SRX devices running 12.1X46 or earlier versions of Junos that are unable to upgrade to Junos version 12.3X48, Juniper recommends upgrading to the latest generation of SRX devices if removal of Kaspersky Labs code is required.
    Applicable Devices unavailable for upgrade to 12.3X48 or higher releases include:
    SRX100B, SRX100H, SRX110H-VA, SRX110HVB, SRX210B, SRX210BE, SRX210H, SRX210H-POE, SRX210HE, SRX210HE-POE, SRX220H, SRX220H-POE, SRX240B, SRX240B2, SRX240H, SRX240H-POE, SRX240H-DC, LN1000-V, LN1000-CC
  • For ScreenOS devices, Juniper recommends upgrading to the latest generation of SRX devices if removal of Kaspersky Labs code is required.

For more information, please see Comparison of Sophos Antivirus to Kaspersky Antivirus.

Modification History

2017-09-26: Added a table of products and OS versions where Kaspersky is included. Also added steps for removing the license.
2018-01-31: Modified supported software for SRX100H2,SRX210H2 and SRX220H2 in SOLUTION section (12.1X46->12.3X48). 
2020-09-21: Content re-reviewed, and no changes are required
2020-10-25: Removed EOS product references.