Description

This article explains the issue while updating the policy, SD is trying to delete the dynamic address feed configuration

Symptoms

The issue will occur for the below configurations in SRX for example:

 

set security dynamic-address feed-server Test_feed url http://Test_feed.com

 

set security dynamic-address feed-server Test_feed update-interval 30

 

set security dynamic-address feed-server Test_feed hold-interval 86400

 

set security dynamic-address feed-server Test_feed feed-name ipv4_valid_addresses path /ipv4/valid_addresses.txt

 

set security dynamic-address address-name ipv4_valid_addresses profile feed-name feed_addresses

 

 

 

set security policies from-zone ZONEA to-zone ZONEB policy Policy_Test match source-address any

 

set security policies from-zone ZONEA to-zone ZONEB policy Policy_Test match destination-address ipv4_valid_addresses

 

set security policies from-zone ZONEA to-zone ZONEB policy Policy_Test match application any

 

set security policies from-zone ZONEA to-zone ZONEB policy Policy_Test then permit

 

set security policies from-zone ZONEA to-zone ZONEB policy Policy_Test then log session-init

 

set security policies from-zone ZONEA to-zone ZONEB policy Policy_Test then log session-close

 

In the policy preview, we will see that the SD is trying to delete the below configuration:

 

##Dynamic Address Configurations##

delete security dynamic-address address-name feed_addresses profile feed-name

 

Solution

The issue will be fixed in SD 26.1 R2 and the ETA will be on the 8th of October, tentatively.

Modification History

2026-10-05 : Article Created