Description

When using KB27038- Security Director Offline IDP (IPS) Signature update procedure [juniper.net]  to upload Offline Signature Database Bundle to Junos Space, the upload fails for signature packages over 1GB.

Symptoms

This error may be seen in Junos Space logs:

Request body (Content-Length) is larger than the configured limit (1073741824).

Solution

Junos Space security measures using the upload screen are preventing file uploads over 1GB.

This problem exists in All Junos Space versions 21.1R1 and older.  Patches released after April 26, 2021 may include a patch, check Patch release notes.

Workaround:

Modify the following values from 1073741824 to 1536000000 in the file /etc/httpd/conf.d/mod_security.conf.

  1. Check the current values: 

    grep "SecRequestBodyLimit\|SecRequestBodyNoFilesLimit\|SecRequestBodyInMemoryLimit" /etc/httpd/conf.d/mod_security.conf
    Example output:
    SecRequestBodyLimit 1073741824
    SecRequestBodyNoFilesLimit 1073741824
    SecRequestBodyInMemoryLimit 1073741824

    If the values listed above are smaller than 1536000000 please continue.

  2. Backup current config file: 

    cp /etc/httpd/conf.d/mod_security.conf /home/admin/http_mod_security.conf.old

  3. Update values: 

    sed -i 's/1073741824/1536000000/' /etc/httpd/conf.d/mod_security.conf

  4. Confirm Values are modified:

    grep "SecRequestBodyLimit\|SecRequestBodyNoFilesLimit\|SecRequestBodyInMemoryLimit" /etc/httpd/conf.d/mod_security.conf

    Example output: 

    SecRequestBodyLimit 1536000000
    SecRequestBodyNoFilesLimit 1536000000
    SecRequestBodyInMemoryLimit 1536000000

  5. Restart httpd (webproxy )process:

    Space version 20.3 and older: 
    service httpd restart
    Space version 21.1: 
    systemctl restart httpd.service