request security idp security-package install
Syntax
request security idp security-package install <policy-templates> <status> <update-attack-database-only>
Description
Updates the attack database inside the device with the newly downloaded one from the staging folder, recompiles the existing running policy, and pushes the recompiled policy to the data plane.
Also, if there is an existing running policy, and the previously installed detector's version is different from the newly downloaded one, the downloaded components are pushed to the data plane. This command installs IDP, IPS, and application package signatures.
Options
policy-templates—(Optional) Installs the policy template file into /var/db/scripts/commit/templates.status—(Optional) The commandsecurity-package installmay take a long time depending on the new Security database size. Hence,security-package installcommand returns immediately and a background process performs the task. User can check the status usingsecurity-package install statuscommand.update-attack-database-only—(Optional) Loads the security package into IDP database but does not compile/push the active policy or the new detector to the data plane.
Required Privilege Level
maintenance
Output Fields
When you enter this command, you are provided feedback on the status of your request.
Sample Output
request security idp security-package install
user@host> request security idp security-package install Will be processed in async mode. Check the status using the status checking CLI
Sample Output
request security idp security-package install status
To request status on a package installation:
user@host> request security idp security-package install status
Done;Attack DB update : successful - [UpdateNumber=1152,ExportDate=Thu Apr 24 14:37:44 2008]
Updating data-plane with new attack or detector : not performed
due to no existing active policy found.
To request status on a template installation:
user@host> request security idp security-package install status Done; policy-template has been successfully updated into internal repository (=>/var/db/scripts/commit/templates.xsl)!
Release Information
Command introduced in Junos OS Release 9.2. Description modified in Junos OS Release 11.1. Added application package support in Junos OS Release 11.4.