Description

 

Configured "Dynamic Address Group Feeds > Third Party DAG Feeds > amazonaws," but the same feed is not visible in the SRX CLI

 

 

Symptoms

 

Configured "Dynamic Address Group Feeds > Third Party DAG Feeds > amazonaws," but the same feed is not visible in the SRX CLI even after 3600 seconds timer.

 

Solution

  • First, check the ATP cloud "Configure > Feeds Configuration  > SecIntel Feeds" shows that amazonaws is enabled.

  • Verify the SRX has the configuration to fetch the "amazonaws" feeds. If not present you can configure it using the below command.
# set security dynamic-address address-name office365 profile category IPFilter feed ipfilter_amazonaws
# commit
  • Now, check after a few hours whether the same feed reflects in the IPFilter output on the SRX CLI. If it does not populate, then check if all the feeds are updated or not; there could be some issues while downloading the latest feeds from the SD/PE/ATP cloud side as well.
  • You may want to manually initiate a download to get the enabled feeds.
> request services security-intelligence download    
node1:
--------------------------------------------------------------------------
Please use command "request services security-intelligence download status" to check the download and install status.

> request services security-intelligence download status 
node1:
--------------------------------------------------------------------------
Security intelligence feed download status:
Start time:Fri Apr 15 06:20:34 2025
Start downloading the latest manifest.
Start parsing manifest file.
Parse manifest succeeded, version:388fb25d1fd36bb97073612a834e2a42.
<...>

> show services security-intelligence category summary
node1:
--------------------------------------------------------------------------
Feed name: ipfilter_amazonaws
logical-system: root-logical-system
Vrf name: junos-default-vrf
Version :20250415.1
Objects number: 8580
Create time: 2025-04-15 06:24:45 IST
Update time:2025-04-15 10:10:53 IST
Update status: Store succeeded
Expired: No
Status: Active
Options :N/A
  • Validate the feeds and follow the configuration guide to use the feeds in the respective Secintel policies.

Modification History

2025-04-18 : Article Created