Description

On all SRX Junos platforms, J-Web permits address names with dots or slashes in address books and security policies but does not allow these characters in NAT policy names. This inconsistency leads to configuration mismatches and potential issues. This issue varies in frequency depending on the address names used.

Symptoms

This issue might be seen if the following conditions are met:
* On all Junos SRX platforms
* Create address name in address book with dot, slash
* J-Web is used to add or modify NAT policies

Solution

Root Cause: J-Web is pushing name in the destination address cli when name contains dot or slash created from address book or security policy. 
In NAT Policy, J-Web is not allowing to create address name with dot or slash.

WorkAround: Use the CLI for configuration instead of J-Web

The FIX for this issue is added to the below listed versions.

21.4R3-S9
22.2R3-S5
22.3R3-S4
22.4R3-S4
23.2R2-S2
23.4R2-S3
24.2R2
24.3R1
24.4R1

https://prsearch.juniper.net/problemreport/PR1823264

Modification History

2024-07-26 : Article Created