While attempting to set up IDP on an SRX Series device, the IDP attack database fails to
download.
What is one reason for this behavior?
A.
The device’s Untrust zone to Trust zone security policy does not allow this traffic.
B.
The device’s configuration does not include the URL from which to retrieve the attack database.
C.
A firewall filter applied to the loopback interface is preventing the download of the attack
database.
D.
The host inbound traffic has not been configured correctly.
Explanation:
B
http://kb.juniper.net/InfoCenter/index?page=content&id=KB23359
agree with hans , must be B
C is a valid reason for the download to fail
http://kb.juniper.net/InfoCenter/index?page=content&id=KB30374&actp=RSS
This could be a multiple answer question.
If I had to choose though I would go with B because of the way the question says setting up the IDP.
The main reasons why the download would fail
This error message can be caused by multiple issues. The scenarios, which might cause the above error, can be broadly classified as follows:
The SRX device does not have Internet connectivity.
The DNS server is not configured on the SRX device.
The SRX device does not have access to the SIG DB server.
Storage space in the Compact Flash is full.