request security idp security-package install

Syntax

Release Information

Command introduced in Release 9.2 of Junos OS.

Description

Update the attack database inside the device with the newly downloaded one from the staging folder, recompiles the existing running policy and pushes the re-compiled policy to the data plane. Also, if there is an existing running policy and the previously installed detector's version is different from the newly downloaded one, the downloaded components are pushed to the data plane.

Options

policy-templates—(Optional) Install the policy template file into /var/db/scripts/commit/templates.

status—(Optional) The command security-package install may take long time depending on the new Security DB size. Hence, security-package install command returns immediately and a background process performs the task. So, user can check the status using security-package install status command.

update-attack-database-only—(Optional) Loads the security package into IDP database but do not compile/push the active policy or the new detector to the data plane.

Required Privilege Level

maintenance

Related Topics

show security idp active-policy

show security idp security-package-version

List of Sample Output

Output Fields

When you enter this command, you are provided feedback on the status of your request.

Sample Output

Will be processed in async mode. Check the status using the status checking CLI

Sample Output

Done;Attack DB update : successful - [UpdateNumber=1152,ExportDate=Thu Apr 24 14:37:44 2008]
     Updating data-plane with new attack or detector : not performed
     due to no existing active policy found.

Done; policy-template has been successfully updated into internal repository
(=>/var/db/scripts/commit/templates.xsl)!