In some cases customers have issues when trying to download IDP security package in a new or old device.

• When we run the command to start the download:

root> request security idp security-package download status

Done; Fetching signed SignatureUpdate_tmp.xml.gz failed, error: Server not reachable

• You can test doing ping to 8.8.8.8 and it works:

root> ping 8.8.8.8

PING 8.8.8.8 (8.8.8.8): 56 data bytes

64 bytes from 8.8.8.8: icmp_seq=0 ttl=111 time=6.043 ms

64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=5.904 ms

• But if you check your system name-server configuration it is empty

[edit system name-server]

root# show

Configure the DNS IP

root# set system name-server 8.8.8.8 (or customer's IP)

root# commit

[edit system name-server]

root# show

8.8.8.8;

Finally, the download will start.

root> request security idp security-package download status

In progress: Downloading ...

Note: If after that, the issue continues, please check the firewall filters for routing engine protection they are applied in the lookback interface (lo0).
In case there is a firewall filter blocking DNS and HTTPS you can edit it to accept the traffic or deactivate for a while to do the download.