This article explains why IDP/App Signature task to update data-plane with new attack or detector is failing on SRX cluster using Security Director.

IDP/App Signature installation is successful; however, job is failing with below error on both SRX cluster nodes. 

"Updating data-plane with new attack or detector : failed"
or
"Updating data-plane with new attack or detector : not performed due to no active policy configured"

Run below command on affected SRX device to verify the same.

> request security idp security-package install status         

Done;Attack DB update : successful - [UpdateNumber=3747,ExportDate=Tue Oct 8 14:30:05 2024 UTC,Detector=12.6.140240409]
   Updating control-plane with new detector : successful
   Updating data-plane with new attack or detector : failed

or

Done;Attack DB update : successful - [UpdateNumber=3747,ExportDate=Tue Oct 8 14:30:05 2024 UTC,Detector=12.6.140240409]
   Updating control-plane with new detector : successful
   Updating data-plane with new attack or detector : not performed
   due to no active policy configured.

For IDP/APP Signature management using Security director follow KB27825 [juniper.net]

Note: If no active IDP policy is configured on the device then updating data-plane with new attack or detector will fail which is expected as per design. User can verify the same using below command on the affected device. 

> show configuration security idp | display set 

If you face any further issues, please contact JUNIPER JTAC Support for assistance.