Description

When performing an IDP signpack update, we'll get an error message "IDP Update error "Updating data-plane with new attack or detector : failed"


SRX> request security idp security-package install status

node0:

--------------------------------------------------------------------------

Done;Attack DB update : successful - [UpdateNumber=3919,ExportDate=Thu Jun 18 13:47:23 2026 UTC,Detector=12.6.130260106]

Updating control-plane with new detector : successful

Updating data-plane with new attack or detector : failed


node1:

--------------------------------------------------------------------------

Done;Attack DB update : successful - [UpdateNumber=3919,ExportDate=Thu Jun 18 13:47:23 2026 UTC,Detector=12.6.130260106]

Updating control-plane with new detector : successful

Updating data-plane with new attack or detector : failed

Solution

"Updating data-plane with new attack or detector : failed" due to an unknown service type being configured.


root@srx# show security idp idp-policy TEST

rulebase-ips {

  rule 1 {

    match {

      application any; ## Warning: 'any' is deprecated      <<<< <<<<It should be “default”, not “any”.

 

[edit]

root@srx# ...lebase-ips rule 1 match application ?

Possible completions:

 <application>

 default       Match default and automatically detected ports to the applications implied in the attack objects          



Updating data-plane with new attack or detector is failed when the invoked IDP policy includes an unknown application service. After changing "any" to "default", the update can complete successfully.



Modification History

2026-07-08 : Article Created