topic Security Zone object are not attached to any interface in Firewall and Security Management

Security Zone object are not attached to any interface

LuisTR — Fri, 11 Mar 2022 20:11:38 GMT

My client has deployed a ClusterXL R81.10 Load Sharing, with Take_22. Its policies manage it with Zones through Inline Layer, and so it was working perfectly. And each vlan or subinterface of the Firewall is attached with a Security Zone.

Over time, a new vlan or subinterface (bond2.12) attached to the Security Zone called "DesktopVirtuales_SegNvl" was added where, when policies are installed, there is an installation error indicating that the zone is not attached to any interface.

Here we can see that the "DesktopVirtuales_SegNvl" zone is attached to the bond2.12 vlan or subinterface.

Does anyone know how to fix this error?

Regards

Re: Security Zone object are not attached to any interface

Chris_Atkinson — Sat, 12 Mar 2022 01:19:33 GMT

Hi Luis,

Two suggestions for you:

1. Please review sk177129 to see if it helps with your scenario

2. Attempt to disable accelerated policy install temporarily per sk168055

Re: Security Zone object are not attached to any interface

Marcel_Gramalla — Sat, 12 Mar 2022 10:04:43 GMT

If this is only happening with an accelerated policy install there is a private hotfix available for the management server.

Re: Security Zone object are not attached to any interface

the_rock — Sat, 12 Mar 2022 11:47:50 GMT

I find solution in that sk very odd for this issue...would not workaround described simply cause a failover from dashboard??

Re: Security Zone object are not attached to any interface

LuisTR — Mon, 14 Mar 2022 14:46:47 GMT

Thanks for your response Chris. Regarding your suggestions:

1. Does not apply to my client's scenario.

2. I couldn't validate said sk168055 but I'll keep it in mind.

I was able to perform a kind of workaround or artifice to be able to temporarily solve the problem of installing policies.

What I did was:

- Disassociate or remove the Security Zone check "DesktopVirtuales_SegNvl" from the bond2.12 subinterface.

Then just Post. And then I re-attached it or placed the Security Zone check.

Finally, I published and installed policies. And it was installed successfully.

But it seems that this policy installation problem occurs every so often.

Does anybody know what is it due to?

What could be a definitive solution?

Re: Security Zone object are not attached to any interface

Marcel_Gramalla — Mon, 14 Mar 2022 15:20:16 GMT

Is this error only happening on accelerated installs? I already said that if this is the case you can get a hotfix for that as this is a bug on the management server. You can open a support case and request a fix for that or just wait a few months to get that fixed (not yet included in Ongoing Take 38). The bug id to look at is: PRHF-22326 (I hope I'm allowed to share that).

Re: Security Zone object are not attached to any interface

LuisTR — Mon, 14 Mar 2022 16:05:25 GMT

Hi Marcel, thanks for your reply.

Yes, the policy installation is an accelerated installation.

So, is it a bug of the Security Management Server but not of the Security Gateway?

Is there public information with the bug id PRHF-22326?

Re: Security Zone object are not attached to any interface

Marcel_Gramalla — Mon, 14 Mar 2022 16:08:07 GMT

Correct, the hotfix we received is for the management. There is no public info yet as from searching the knowledgebase.