Updating attack database of srx cluster node1
When you have an SRX cluster and you need to update/install idp attack database on the second node,
you will realize that it isn’t done automatically (before 12.1 release) You can update/install the active node but not the other. The work around to do this is to manually copy attack DB files to the second node and install. Here is how we do it;
Copy the attack DB files to the 2nd node;
root@srx210-1% rcp -r -T /var/db/idpd/sec-download/* node1:/var/db/idpd/sec-download/
Install the new files on the 2nd node;
{primary:node0} root@srx210-1> request security idp security-package install node 1
After a while once the compilation finishes, you will have a similar output like my cluster;
{primary:node0} root@srx210-1> show security idp security-package-version node0: -------------------------------------------------------------------------- Attack database version:2199(Wed Oct 31 12:11:01 2012) Detector version :12.6.160120907 Policy template version :2193 node1: -------------------------------------------------------------------------- Attack database version:2199(Wed Oct 31 12:11:01 2012) Detector version :12.6.160120907 Policy template version :2193