topic Re: Compilation firewall in General Topics

Compilation firewall

samdin — Thu, 04 Jul 2024 15:29:35 GMT

Hello,

I have a problem, I specify that I am a beginner

I have a cluster. I compiled my rule on the nominal firewall :

"Policy installation success"

On the backup firewall:

"Policy failed"

I have 2 questions.

When pushing a firewall, the management server first pushes the policy on the nominal and then on the backup?

Could the problem come from the management server?

2nd question: is it possible for the backup firewall to have left the cluster, and how can I check this on the command line?

Thank

Re: Compilation firewall

the_rock — Thu, 04 Jul 2024 16:11:23 GMT

Policy failed sadly does not tell us anything, except that it failed, but its such a generic error. Do you see any additional reason as to why? Did you verify SIC works? If its cluster, it would by default apply policy to both.

Andy

Re: Compilation firewall

PhoneBoy — Mon, 08 Jul 2024 18:06:13 GMT

The policy is compiled on the management and pushed to the gateway.
If the policy failed to push to one of the members, it's most likely an issue on that member.
Please start with the following SK (depending on the exact error): https://support.checkpoint.com/results/sk/sk179626