Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

SRX IDP: JPME compilation failed - Junos 11.4

Starting with Junos 11.4, IDP uses a hardware component to compile policy. This provides some advantages over the software compiler ("idpd" process on control plane):
- faster compile time.
- resulted policy memory footprint is ~80% smaller.
- some minor bugs that Juniper will fix in next releases.

When using custom signatures, one common mistake is forgetting to close the case insensitive denoting brackets ( \[ \] ).

This will result in a JPME error:



Check all your custom signatures for unclosed ranges or any possible mistakes.