topic Re: Issue with R81 policy management in Firewall and Security Management

Issue with R81 policy management

HristoGrigorov — Wed, 29 Sep 2021 17:14:06 GMT

I think I found an issue with R81 policy management.

I am in a process of configuring new cluster object. It does not yet have sync interface defined.

Now, I am trying to install policy which has absolutely nothing to do with this object. I am absolutely sure about that.

Yet, it won't let me install that policy until I define sync interface first.

R81 T42

Re: Issue with R81 policy management

the_rock — Wed, 29 Sep 2021 18:31:22 GMT

Wait, just to make sure Im not missing something here : - ). You are saying you are in process of setting up brand new cluster, BUT, you are attempting policy push on a different object and its not letting you?

Andy

Re: Issue with R81 policy management

Tal_Paz-Fridman — Wed, 29 Sep 2021 19:20:12 GMT

Hi Hristo,

This is an old validation that exists in all our versions. It examines all Security Cluster objects to see if a synchronization network exists.

I agree it should not be given if the Security Cluster is not in the policy installation targets.

I will move this to the relevant R&D owners.

Thanks

Tal

Re: Issue with R81 policy management

the_rock — Wed, 29 Sep 2021 19:48:20 GMT

@Tal_Paz-Fridman Are you 100% sure thats the case? I never ever saw that in R77.xx, R65 or even back in R60.

Re: Issue with R81 policy management

HristoGrigorov — Thu, 30 Sep 2021 04:55:06 GMT

Yup, it is exactly as explained by @Tal_Paz-Fridman. Luckily in this case it was easy to fix. But may be in some other it won't be.

Re: Issue with R81 policy management

Maarten_Sjouw — Thu, 30 Sep 2021 07:45:41 GMT

I have seen this to many times to my liking and as I recall it is also in R77.30, before that version I have no recollection anymore, that is way to long ago.