topic Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration? in API / CLI Discussion

Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

StackCap43382 — Mon, 06 Oct 2025 20:56:22 GMT

Just had to restore Access to an estate after a bad policy was pushed.

Had to resort to unloadlocal on a cluster member and tunnel through ssh to be able to access the Manager and repair the damage.

After the above I attempted to replicate the above using Mgmt_CLI:

* Unload Local one one member > SSH to Manager

* List published sessions

* Revert to session with date before bad policy

* list the policy packages

* list the clusters in the package

* Run the command to install the policy to the cluster and ignore a failed install on one member

I cant disable acceleration so i cant install policy to the unloaded gateway.

Initial policy does not work either.

Only installing the "Bad" policy allows an accelerated policy but that breaks mgmt connectivity.

Is the ability to disable policy acceleration on a Mgmt_cli install going to be added or did i miss it?

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

the_rock — Mon, 06 Oct 2025 21:38:11 GMT

You cannot do that at the moment via mgmt_cli, not possible. I actually had TAC case about this recently and they confirmed the same.

Best,

Andy

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

PhoneBoy — Mon, 06 Oct 2025 22:31:21 GMT

The reason you can't do it via mgmt_clit is the API doesn't have support for this.
Otherwise, you'd see an option for it here: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/install-policy~v2%20

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

StackCap43382 — Tue, 07 Oct 2025 08:04:35 GMT

Yeah its a silly thing not to implement when they have added functionally for every other step in a policy installation process.

Hopefully its added in the future.

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

the_rock — Tue, 07 Oct 2025 10:56:38 GMT

Yea, lets hope so.

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

PhoneBoy — Tue, 07 Oct 2025 19:26:48 GMT

I agree, install-policy should have an option to disable accelerated policy install.
@Omer_Kleinstern

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

Omer_Kleinstern — Wed, 08 Oct 2025 12:58:54 GMT

Hi,

You can add "force-full-install true" to the API command.

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

the_rock — Wed, 08 Oct 2025 13:00:09 GMT

Hi Omer,

Thats same thing as disabling accelerated option?

Andy

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

Omer_Kleinstern — Wed, 08 Oct 2025 13:04:29 GMT

Yes

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

the_rock — Wed, 08 Oct 2025 13:11:37 GMT

Thank you!

Re: Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

PhoneBoy — Wed, 08 Oct 2025 14:00:44 GMT

If that’s true, can we update the docs accordingly?