Intrusion Prevention

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



  • 1.  Applying security policy IDP

    Posted 01-14-2021 22:11
    greetings, I am trying to apply IDP policy and it gives me error at commit "please install the signature database", where as my all licenses are valid and I have downloaded & installed signature database

    ------------------------------
    MATLOOB AHMED
    ------------------------------


  • 2.  RE: Applying security policy IDP

     
    Posted 01-16-2021 13:02
    Could you run these verification commands
    request security idp security-package download status
    --should show successfully downloaded

    request security idp security-package install status
    --should show successful

    show security idp security-package-version
    ---should show a recent date and version

    If these are all good can you post the exact configuration and the error message.

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: Applying security policy IDP

    Posted 01-18-2021 04:01
    It showed success and its version was of June os15 now I have upgraded srx18.4

    ------------------------------
    MATLOOB AHMED
    ------------------------------



  • 4.  RE: Applying security policy IDP

     
    Posted 01-18-2021 19:49
    Looks like there is a bug in upgrading IDP from 15 into 17 or higher.

    https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1455125

    Seems you would need to remove and reinstall IDP to update the database process changes made in newer versions.

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------