Mgmt_CLI Policy Install - Disable Policy Install Acceleration?

[StackCap43382]

Just had to restore Access to an estate after a bad policy was pushed.

Had to resort to unloadlocal on a cluster member and tunnel through ssh to be able to access the Manager and repair the damage.

After the above I attempted to replicate the above using Mgmt_CLI:

* Unload Local one one member > SSH to Manager

* List published sessions 

* Revert to session with date before bad policy

* list the policy packages

* list the clusters in the package

* Run the command to install the policy to the cluster and ignore a failed install on one member 

I cant disable acceleration so i cant install policy to the unloaded gateway.

Initial policy does not work either. 

Only installing the "Bad" policy allows an accelerated policy but that breaks mgmt connectivity. 

Is the ability to disable policy acceleration on a Mgmt_cli install going to be added or did i miss it? 

[the_rock · Accepted solution]

You cannot do that at the moment via mgmt_cli, not possible. I actually had TAC case about this recently and they confirmed the same.

Best,

Andy

[PhoneBoy]

The reason you can't do it via mgmt_clit is the API doesn't have support for this.
Otherwise, you'd see an option for it here: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/install-policy~v2%20 

[StackCap43382]

Yeah its a silly thing not to implement when they have added functionally for every other step in a policy installation process.   

Hopefully its added in the future.

[the_rock]

Yea, lets hope so.

[PhoneBoy]

I agree, install-policy should have an option to disable accelerated policy install.
@Omer_Kleinstern 

[Omer_Kleinstern]

Hi,

You can add "force-full-install true" to the API command.

[the_rock]

Hi Omer,

Thats same thing as disabling accelerated option?

Andy

[Omer_Kleinstern]

Yes

[the_rock]

Thank you!

[PhoneBoy]

If that’s true, can we update the docs accordingly?