This article describes how to install policy templates offline when there is no internet connectivity or when connected via proxy server.

 

Opening the file (/var/db/idpd/sec-download/sub-download/SignatureUpdate.xml) fails with this message:

No such file or directory

 

Perform offline signature update and install the database. Performing offline signature update on SRX devices is described in detail in KB32399 - [SRX] How to update IDP Signature Database off-line.  

To install the policy templates offline, perform the following steps:

1. All the required files are copied and unzipped once you installed the offline package as per above KB32399 .

Run the following command to install the policy templates:

CLI> request security idp security-package install policy-templates

Check the install status: 

cli> request security idp security-package install status
Done;policy-templates has been successfully updated into internal repository
(=>/var/db/scripts/commit/templates.xsl)!

2. Check the policy template version using the following command:

CLI> show security idp security-package-version

NOTE

Sometimes a user may come across the following error:

# run request security idp security-package install policy-templates
opening file(/var/db/idpd/sec-download/sub-download/SignatureUpdate.xml) failed;No such file or directory

This is because SignatureUpdate.xml is not copied to the /var/db/idpd/sec-download/sub-download/ directory.

In this case, you can manually copy the SignatureUpdate.xml and templates.xml and try to update again. Follow the steps given here:

1. Unzip SignatureUpdate.xml.gz & templates.xml.gz  in the offline-update package.

2. Transfer the templates.xml and SignatureUpdate.xml to /var/db/idpd/sec-download/sub-download/:

# run file list /var/db/idpd/sec-download/sub-download/

/var/db/idpd/sec-download/sub-download/:
SignatureUpdate.xml*
templates.xml*

3. Run the following command to install policy templates:

# run request security idp security-package install policy-templates

This is processed in async mode. Check the status using the CLI.

4. Check the install status.

# run request security idp security-package install status
Done;policy-templates has been successfully updated into internal repository
(=>/var/db/scripts/commit/templates.xsl)!

If you require additional assistance, contact Support.

 

2020/07/27: Article reviewed for accuracy; changes per the latest Junos OS release made; links updated