This article explains the procedure to update the APPID database offline without updating/modifying the IDP database

1. On a PC,
   1. Download the required IDP database offline update file from "https://support.juniper.net/support/downloads/", "Related Software" section.
      A file by the name "280_3869_offline-update.tar.gz" will be downloaded (the version numbers may change based on the choice).
   2. Unzip this file, and the contents will be as follows
       

2. Take an SFTP session to SRX.

   1. Change the directory to "/var/db/appid/sec-download".
      1. root@srx>start shell
      2. root@srx% cd /var/db/appid/sec-download
   2. Delete all files (if any).
      1. rm -rf *
   3. Copy all the extracted files on the PC AS-IS to this directory.
3. Now run the command "request services application-identification install".
   1. root@srx> request services application-identification install                        
      Please use command
              "request services application-identification install status" to check install status
4. Check the status of installation using the command "request services application-identification install status"
   1. root@srx> request services application-identification install status 
      Installed
              Application package 3869 (Minor) and Protocol bundle successfully
5. Check the version using the command "show services application-identification version" 
   1. root@srx> show services application-identification version       
        Application package version: 3869 (Minor)
        Release date: Thu Aug 14 14:01:41 2025 UTC
6. The IDP database remains unchanged/unaffected.
   1. root@srx> show security idp security-package-version 
        Attack database version:3835(Thu Aug 14 14:01:41 2025 UTC)
        Detector version :12.6.180240709
        Policy template version :N/A
        Rollback Attack database version :()
        Rollback Detector version : 12.6.180180521