topic Re: policy installation failed in Firewall and Security Management

policy installation failed

tavi0906 — Tue, 25 Jul 2023 02:07:22 GMT

policy installation failed with the error message : " failed to create product policy life "

how to troubleshoot ?

Re: policy installation failed

the_rock — Tue, 25 Jul 2023 02:12:32 GMT

Never seen that error before. What version is this? Can you verify SIC works fine and you can do fw fetch from gateway itself? Maybe try do last revision from when policy did work and see if that helps.

Andy

Re: policy installation failed

tavi0906 — Tue, 25 Jul 2023 02:14:19 GMT

version r81.10 and SIC works fine

Re: policy installation failed

Tal_Paz-Fridman — Tue, 25 Jul 2023 08:55:01 GMT

Can you please add an attachment of the exact message?

Re: policy installation failed

tavi0906 — Tue, 25 Jul 2023 09:42:36 GMT

now getting some other error during the policy installation.

error " failed to download security policies on <xxxxx> ( gateway hostname)

Re: policy installation failed

the_rock — Tue, 25 Jul 2023 12:29:41 GMT

Does this command work? Say mgmt IP is 10.10.10.10, from gateway expert mode run -> fw fetch 10.10.10.10

Andy

Re: policy installation failed

Jeff_Post — Tue, 25 Jul 2023 17:14:36 GMT

Did you just upgrade to R81.10? If so did you change the version in the management console to R81.10. We had this issue when we were upgrading. I had to manually change the cluster to R81.10, then push policy checking the box to allow a separate policy install to each cluster member, even if one cluster member fails (as it would since it hadn't been upgraded to R81.10 yet)

Jeff

Re: policy installation failed

the_rock — Tue, 25 Jul 2023 17:16:50 GMT

Thats good point, BUT...Im fairly sure error always used to specifically say that version was not matching when that was the case. No idea if thats been the case in R80+, as I never encountered it since R77.30

Andy

Re: policy installation failed

tavi0906 — Wed, 26 Jul 2023 12:03:19 GMT

ya i have run that and fetched to latest policy and tried to install the policy but no use same error.

Re: policy installation failed

tavi0906 — Wed, 26 Jul 2023 12:04:03 GMT

i have checked this and version is r81.10.

Re: policy installation failed

_Val_ — Wed, 26 Jul 2023 12:12:52 GMT

Please open a TAC case via https://hepl.checkpoint.com

Re: policy installation failed

the_rock — Wed, 26 Jul 2023 12:13:48 GMT

Honestly, if I were you, I would pick up the phone and call TAC and get remote going, tell them its an urgent issue, because it is.

Andy