Description

This article explains how to fix the policy update issue if it is failing with the following error
 

[Error] Configuration update failed. Severity : warning At : [edit] Message : mgd: statement has no contents; ignored Details : applications Severity : error At : [edit security idp default-policy] Message : Policy must be defined under [security idp idp-policy] Details : default-policy IDPpolicy_test Severity : error Message : commit failed: (statements constraint check failed) 

Symptoms

This issue will occur when SD is trying to push "set security idp default-policy IDPpolicy_test" to the device. However, the IDP policy is not configured in the SRX.

 

Solution

To fix the issue, please remove the IDPpolicy_test from the Global Option using the following steps:

In Security Director, navigate to Configure > Standard Policies > click on "Global Option" > select IDP Default and remove the IDP policy "IDPpolicy_test"

Modification History

2024-08-05 : Article Created