Intrusion Prevention

 View Only

IMPORTANT MODERATION NOTICE

This community is currently under full moderation, meaning  all posts will be reviewed before appearing in the community. Please expect a brief delay—there is no need to post multiple times. If your post is rejected, you'll receive an email outlining the reason(s). We've implemented full moderation to control spam. Thank you for your patience and participation.



Expand all | Collapse all

IDP security-package-version fail update on primary node but ok on secondary node

This thread has been viewed 8 times
  • 1.  IDP security-package-version fail update on primary node but ok on secondary node

    Posted 07-22-2022 05:58

    Hello, have  problem: in chassis cluster on primary node idp cant update security-package-version, but  normally update on standby node.

    node0:
    --------------------------------------------------------------------------
    Done;AI installation failed! Attack DB update failed!
    Protocol bundle installation failed in pfe with error (load pb failed in pic [0.-1])

    node1:
    --------------------------------------------------------------------------
    Done;Attack DB update : successful - [UpdateNumber=3511,ExportDate=Thu Jul 21 14:20:59 2022 UTC,Detector=12.6.130200828]
    Updating control-plane with new detector : successful
    Updating data-plane with new attack or detector : successful

    Dont know why appid installed failed with this messages



    ------------------------------
    andrii furdyha
    ------------------------------


  • 2.  RE: IDP security-package-version fail update on primary node but ok on secondary node

    Posted 07-22-2022 06:00
    You can follow the steps in this kb to verify the license and access to the download site from node 0 to see if you can get it to work again.

    https://supportportal.juniper.net/s/article/Exec-attack-db-update-is-having-problems-downloading-the-attack-signature-updates?language=en_US

    Or run the offline update process using this procedure

    https://supportportal.juniper.net/s/article/How-to-perform-offline-IDP-and-Application-signature-database-update-in-SRX?language=en_US

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: IDP security-package-version fail update on primary node but ok on secondary node

    Posted 07-22-2022 06:49

    License is all ok on each node. Update pack successful downloaded but failed install with error Protocol bundle installation failed in pfe with error (load pb failed in pic [0.-1])



    ------------------------------
    andrii furdyha
    ------------------------------