The JNCIP / JNCIE-SEC latest courses use 12.1X44-D10.4 as the recommended Junos version. I setup a 30-day evaluation on my home SRX device to study JIPS, based on 12.1. At this point, I'm guessing that my problem is that trial licenses for 12.1X44-D10.4 might be equivalent to 12.2, 12.3, or entirely not supported. Here's what I'm trying now:
netops> request security idp security-package download full-update Will be processed in async mode. Check the status using the status checking CLI root> request security idp security-package download status In progress:SignatureUpdate_tmp.xml.gz 100 % 2034681 Bytes/ 2034681 Bytes root> request security idp security-package download status Done;File applications.xml.gz is corrupt - MD5 hash match failed
Since the license installed properly (but not the IDP signatures), I was also going to manually request a download with the proper URL parameters (mentioned in KB19502)
I've had no luck on Juniper.net, but here are my planned next steps:
- Sniff the traffic / figure out which version it's trying to download
- Manually request a download, eg.
- Talk to my Juniper rep this week (and yes, I'm adding support on this device). Edit: opened a Customer Care ticket with Juniper, as it's a new device. Will follow up with resolution.
- I'm reading through the techpubs/documentation to see if there are any additional steps that could be causing this to fail, but I've tried the usual suspects like name resolution, system time/NTP, etc. etc.
Edit: downgrading to 12.1R5.5 did not fix the issue, and I'm still getting corrupt/md5 hash match failed. This does not appear to be due to lack of storage, which could cause weird errors like this.