Re: [j-nsp] SRX and http/https proxy

2017-12-21 Thread Benoit Plessis
On 20/12/2017 23:00, Roger Wiklund wrote: > You can download the latest signature here: > > https://kb.juniper.net/InfoCenter/index?page=content=KB27038 > > Try this: > > 1. unzip the file, then gunzip all gz files: gzip -d *.gz > 2. copy all files to the device with scp: scp -r * >

Re: [j-nsp] SRX and http/https proxy

2017-12-20 Thread Roger Wiklund
You can download the latest signature here: https://kb.juniper.net/InfoCenter/index?page=content=KB27038 Try this: 1. unzip the file, then gunzip all gz files: gzip -d *.gz 2. copy all files to the device with scp: scp -r * root@ip :/var/db/idpd/sec-download/ 3. request security idp

Re: [j-nsp] SRX and http/https proxy

2017-12-14 Thread Benoit Plessis
Sorry i lost Roger's mail so this might bork the thread .. > Two options on the top of my head: > > 1. Use Security Director, that will download the signature to the server > and then push it to the device. (SD will also give you lots of other > benefits/visibility) > 2. Download the update to a

Re: [j-nsp] SRX and http/https proxy

2017-12-12 Thread Roger Wiklund
Two options on the top of my head: 1. Use Security Director, that will download the signature to the server and then push it to the device. (SD will also give you lots of other benefits/visibility) 2. Download the update to a web server the SRX can reach, then use offline-download "request

[j-nsp] SRX and http/https proxy

2017-12-12 Thread Benoit Plessis
Hi, We have recently bought an SRX345 cluster with IDP licensing and i'm a bit baffled by something a bit "stupid". The SRX will need regular download over the internet for the IDP database, however, by principle i setup the system so that the admin interface has a limited network connectivity