This article explains how to fix the policy update issue if it is failing with the following error
[Error] Configuration update failed. Severity : warning At : [edit] Message : mgd: statement has no contents; ignored Details : applications Severity : error At : [edit security idp default-policy] Message : Policy must be defined under [security idp idp-policy] Details : default-policy IDPpolicy_test Severity : error Message : commit failed: (statements constraint check failed)
This issue will occur when SD is trying to push "set security idp default-policy IDPpolicy_test" to the device. However, the IDP policy is not configured in the SRX.
To fix the issue, please remove the IDPpolicy_test from the Global Option using the following steps:
In Security Director, navigate to Configure > Standard Policies > click on "Global Option" > select IDP Default and remove the IDP policy "IDPpolicy_test"