Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Updating the IDP Detector Engine

 

The following topics give procedures for updating IDP detector engine software:

Using NSM to Update the Detector Engine Software

Using NSM to Update the Detector Engine Software

To update the IDP detector engine using NSM:

  1. Download IDP detector engine and NSM attack database updates to the NSM GUI server:

    In NSM, select Tools > View/Update NSM attack database and complete the wizard steps.

  2. Push the updated IDP detector engine to IDP devices:

    For IDP OS or ScreenOS devices, select Devices > IDP Detector Engine > Load IDP Detector Engine for ScreenOS and complete the wizard steps.

    For Junos OS devices, select Devices > IDP Detector Engine > Load IDP Detector Engine for JUNOS and complete the wizard steps.

  3. Run a security policy update job to initialize the IDP detector engine update:
    1. In NSM, select Devices > Configuration > Update Device Config.
    2. Select devices to which to push the updates and set update job options.
    3. Click OK.
Note

Updating the IDP detector engine on a device does not require a reboot of the device.

Using the Junos OS CLI to Update the Detector Engine Software

Using the Junos OS CLI to Update the Detector Engine Software

To update a Junos OS device using the Junos OS CLI:

  1. Download the security package. The security package includes the detector and the latest attack objects and groups.
    user@host> request security idp security-package download full-update
  2. Update the attack database, the active policy, and the detector with the new package.
    user@host> request security idp security-package install
  3. Check the attack database update status with the following command. The command output displays information about the downloaded and installed versions of attack database versions.
    user@host> request security idp security-package install status
  4. Commit the configuration.

For additional information, see the Junos OS security configuration documentation.

Using J-Web to Update the Detector Engine Software

Using J-Web to Update the Detector Engine Software

To update a Junos OS device using J-Web Quick Configuration:

  1. Select Configuration > Quick Configuration > Security Policies > IDP Policies.
  2. From the IDP policies page, click Security Package Update.
  3. From the IDP page, click Signature/Policy Update.
  4. Complete the configuration as described in the online help.
  5. Click Apply.

For additional information, see the Junos OS security configuration documentation.