An error occurred when trying to download the IDP database for installation because the idp-policy process was disabled. This article explains how to enable the idp-policy process to avoid the error.
When trying to download and install the IDP database, the following error is returned:
root@SRX550> request security idp security-package download warning: idp-policy subsystem has been disabled by the user
This happens whether the security ID stanza is activated or not.
This error occurs if the idp-policy process has been disabled.
To fix this, the idp-policy process must be enabled.
Run 'show system processes | match idpd' to verify if the IDP deamon is running.
'show system processes | match idpd'
root@SRX550> show system processes | match idpd root@SRX550>
root@SRX550> show system processes | match idpd
root@SRX550>
You can see the idp-process is disabled:
root@SRX550# show | match disable | display set set system processes idp-policy disable
To enable it, delete the disable command:
root@SRX550# delete system processes idp-policy disable [edit] root@SRX550# commit commit complete
IDPD is now running:
root@SRX550> show system processes | match idpd 33637 ?? S 0:00.62 /usr/sbin/idpd -N
IDP will now download without error:
root@SRX550> request security idp security-package download will be processed in async mode. Check the status using the status checking CLI