topic Re: Issues during disable a rule on old policy package in Firewall and Security Management

Issues during disable a rule on old policy package

Donnie125 — Thu, 07 Sep 2023 04:43:52 GMT

Dear Expert,

I encountered problems when I disabled the rule on the old policy package that we stopped using a long time ago.

During the troubleshooting, we found some service is still inspected on the rule with the old policy packet causing the service have issues. After we discussed it internally, we decided to disable the rule on the old policy packet and plan to delete and remove it from Manage Policy due to we still have another policy package running. Unfortunately, disabling the rule poses a problem in our operation.

Old policy package = Standard

Has anyone else experienced a similar issue?

Could you kindly share any advice with me?

CP_OS_R81.10

Re: Issues during disable a rule on old policy package

_Val_ — Mon, 11 Sep 2023 12:21:08 GMT

There are two policies here, Network Security and Threat Prevention. Which one is problematic?

Re: Issues during disable a rule on old policy package

Donnie125 — Mon, 11 Sep 2023 15:02:37 GMT

Dear Val,

After disabling all existing rules on the old policy package, we select network security and threat prevention and install them to override.

Re: Issues during disable a rule on old policy package

PhoneBoy — Mon, 11 Sep 2023 15:26:59 GMT

Clearly you created a new policy package (Standard_something) and are intending to install it on a gateway with a different policy package installed (Standard).
This is not an error, but a warning to confirm this is what you intended to do.

Re: Issues during disable a rule on old policy package

Donnie125 — Wed, 20 Sep 2023 01:21:27 GMT

Dear PhoneBoy,

Thank you for your sharing.

I found the real issues due to my team installing the new rule on the existing package (Standard) that caused the gateway to work on AC Policy and Threat Prevention Policy with (Standard) and override the current rule.

Now I have fixed this issues.