— Exhibit —
[edit security]
user@srx# show
idp {
idp-policy NewPolicy {
rulebase-exempt {
rule 1 {
description AllowExternalRule;
match {
source-address any;
destination-address
}
}
}
}
}
— Exhibit —
You are performing the initial IDP installation on your new SRX device. You have configured the IDP exempt
rulebase as shown in the exhibit, but the commit is not successful.
Referring to the exhibit, what solves the issue?

A.
You must configure the destination zone match.

B.
You must configure the IPS exempt accept action.

C.
You must configure the IPS rulebase.

D.
You must configure the IPS engine flow action to ignore.

Explanation:
http://jncie-sec.exactnetworks.net/2013/01/srx-idp-overview-initial-setup.html