Description

This article describes how to install policy templates offline when there is no internet connectivity or when connected via proxy server.

 

Symptoms

Opening the file ( /var/db/idpd/sec-download/sub-download/SignatureUpdate.xml ) fails with this message: 

No such file or directory

 

Solution

Perform offline signature update and install the database. Performing offline signature update on SRX devices is described in detail in KB32399 - [SRX] How to update IDP Signature Database off-line [juniper.net] .  

To install the policy templates offline, perform the following steps:

  1. All the required files are copied and unzipped once you installed the offline package as per above KB32399 [juniper.net] .

Run the following command to install the policy templates: 

CLI> request security idp security-package install policy-templates

Check the install status:  

cli> request security idp security-package install status
Done;policy-templates has been successfully updated into internal repository
(=>/var/db/scripts/commit/templates.xsl)!

  1. Check the policy template version using the following command: 

CLI> show security idp security-package-version
NOTE

Sometimes a user may come across the following error: 

# run request security idp security-package install policy-templates
opening file(/var/db/idpd/sec-download/sub-download/SignatureUpdate.xml) failed;No such file or directory

This is because SignatureUpdate.xml is not copied to the /var/db/idpd/sec-download/sub-download/ directory.

In this case, you can manually copy the SignatureUpdate.xml and templates.xml and try to update again. Follow the steps given here:

  1. Unzip SignatureUpdate.xml.gz & templates.xml.gz   in the offline-update package.

  2. Transfer the templates.xml and SignatureUpdate.xml to /var/db/idpd/sec-download/sub-download/ : 

# run file list /var/db/idpd/sec-download/sub-download/

/var/db/idpd/sec-download/sub-download/:
SignatureUpdate.xml*
templates.xml*

  1. Run the following command to install policy templates: 

# run request security idp security-package install policy-templates

This is processed in async mode. Check the status using the CLI.

  1. Check the install status. 
# run request security idp security-package install status
Done;policy-templates has been successfully updated into internal repository
(=>/var/db/scripts/commit/templates.xsl)!

If you require additional assistance, contact Support .

 

Modification History

2020/07/27: Article reviewed for accuracy; changes per the latest Junos OS release made; links updated

 

Related Information