This article outlines a potential solution to the issue where a firewall policy update with default UTM configuration options failed with the error "statement creation failed" for "pattern-update".

In Security Director, when performing an update to an SRX device with a firewall policy that includes the bellow default UTM configuration options fails.

set security utm default-configuration anti-virus sophos-engine pattern-update interval 3600

set security utm default-configuration anti-virus sophos-engine pattern-update url http://update.juniper-updates.net/sav/

The update fails with an error similar to the following:

<error-type>protocol</error-type>

<error-tag>operation-failed</error-tag>

<error-severity>error</error-severity>

<error-message>statement creation failed</error-message>

<error-info>

<bad-element>pattern-update</bad-element>

</error-info>

</rpc-error>

</rpc-reply>

The fix to this issue was added to Security Director hot-patch 24.1R4 HPv1.

Security Director Release Notes 24.1