Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[SRX-IDP] Changes to Recommended or Other Policy Templates Not Committed

0

0

Article ID: KB30312 KB Last Updated: 05 Mar 2017Version: 2.0
Summary:

An administrator is trying to make changes to a policy template, but the changes are not commited, even though no warning is given. This article explains the problem and suggests a solution.

Symptoms:

After making a change to a policy template, either within an IPS or Exempt rulebase, the changes will commit without showing an error, but will not be present when the commit is completed.

Cause:

The reason for this behavior is that while it was previously possible to edit policy templates, since May of 2014 this has changed. Since that date, policy templates cannot be edited.

Solution:

The solution is to make a copy of the policy template, and then edit it:

root@SRX1# copy security idp idp-policy Recommended to idp-policy New_Recommended

{primary:node0}[edit]
root@SRX1# show | compare
[edit security idp]
+ idp-policy New_Recommended {

For more information on the policy template changes, please see the following Knowledge Base entries:

KB29111 - [SRX Series] Updated IDP policy templates

TSB16412 - Juniper updating built-in IDP policy templates in attackDB update

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search