https://community.checkpoint.com/t5/Firewall-and-Security-Management/unable-to-install-policy-per-mgmt-cli-error-incompatible-policy/m-p/175044#M31882 <P>Hello PhoneBoy,</P><P>&nbsp;</P><P>that's great.</P><P>thank's so much.</P><P>jeff</P> Wed, 15 Mar 2023 19:48:24 GMT FireMage 2023-03-15T19:48:24Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/unable-to-install-policy-per-mgmt-cli-error-incompatible-policy/m-p/175032#M31879 <P>hello <a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/45104">@All</a><BR /><BR />i am quite new here and hope you can help me.<BR /><BR />i have a huge problem. i have a Gaia R80.20 as single deployment (management &amp; enforcement together) in use. this has booted at once and after reboot it had my required policy no longer loaded. the default policy (fw stat) gave me but no way to get to the checkpoint. neither to the gaia nor via smart dashboard to the management. so i went directly to the console and tried to reload it via mgmt_cli install-policy policy-package work (work is the name of the policy). unfortunately this went wrong. the following error message appeared:</P><P><STRONG>... policy version are incompatible. disable accelerated install policy ... see SK168055</STRONG><BR /><BR />well, i thought. there must be an option in mgmt_cli to disable the acceleration. just like in dashboard. but unfortunately i didn't see anything.<BR /><BR />therefore 2 questions:<BR /><BR />- how can i change the defaultpolicy so that i have at least the minimal rules in there to restore a backup and get to the management? i created my own policy (emergency). how can i make sure that it is ALWAYS loaded in case of doubt.<BR /><BR />- how do i get my policy loaded when this incompatibility error occurs?<BR /><BR />thank you very much<BR />jeff<BR /><BR /></P> Wed, 15 Mar 2023 18:53:48 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/unable-to-install-policy-per-mgmt-cli-error-incompatible-policy/m-p/175032#M31879 FireMage 2023-03-15T18:53:48Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/unable-to-install-policy-per-mgmt-cli-error-incompatible-policy/m-p/175034#M31880 <P>DefaultFilter and InitialPolicy cannot be changed.</P> <P>Ensure the gateway is not connected to the Internet and do an&nbsp;"fw unloadlocal" to unload the policy temporarily.<BR />Note: this means no access policy is being enforced!<BR />You should then be able to connect with SmartConsole and make the required changes to install the policy successfully.</P> Wed, 15 Mar 2023 19:03:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/unable-to-install-policy-per-mgmt-cli-error-incompatible-policy/m-p/175034#M31880 PhoneBoy 2023-03-15T19:03:24Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/unable-to-install-policy-per-mgmt-cli-error-incompatible-policy/m-p/175042#M31881 <P>Phoneboy brings up a very good point. If you unload the policy, you can then make necessary changes from smart console, which would be accessible at that time.</P> Wed, 15 Mar 2023 19:38:49 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/unable-to-install-policy-per-mgmt-cli-error-incompatible-policy/m-p/175042#M31881 the_rock 2023-03-15T19:38:49Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/unable-to-install-policy-per-mgmt-cli-error-incompatible-policy/m-p/175044#M31882 <P>Hello PhoneBoy,</P><P>&nbsp;</P><P>that's great.</P><P>thank's so much.</P><P>jeff</P> Wed, 15 Mar 2023 19:48:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/unable-to-install-policy-per-mgmt-cli-error-incompatible-policy/m-p/175044#M31882 FireMage 2023-03-15T19:48:24Z