Description

IDP deprecated under security policy after upgrading SRX to Junos 23.2 version.

Symptoms

root@SRX# show security policies from-zone TRUST to-zone UNTRUST policy Guest 
match {
    source-address SUBNET-A;
    destination-address any;
    application any;
}
then {
    permit {
        application-services {

idp; ## Warning: 'idp' is deprecated

}

Solution

Starting Junos 23.1 release application-services idp is deprecated and we need to configure the idp policy explicitly under application-services.

 

Instead of directly enabling "application-services idp" within individual security policies, IDP functionality is now managed by assigning an IDP policy to the relevant security policy rules.

 

root@SRX# show security policies from-zone TRUST to-zone UNTRUST policy Guest 
match {
    source-address SUBNET-A;
    destination-address any;
    application any;
}
then {
    permit {
        application-services {
            idp-policy Recommended;
        }
    }

Modification History

2024-08-06: Article Created.

2025-09-08: Corrected categories.

2025-09-24: Minor edit.