Checkpoint R81.10 Policy installation with warnings

[IFB-Jeff]

We recently upgraded our Active/Standby gateways & management server to R81.10.

When I do a Policy Push/Install - I get  "Successful w/warnings" 

How do I display what the warnings are ?  

When we were R80.20 it showed the details in the Policy Push window

[the_rock]

There is always little arrow pointing down in the policy install window that would show you that.

[IFB-Jeff · Accepted solution]

Thanks !  

I clicked on it and it expanded with the warnings 

[the_rock]

Good job!

[AaronCP]

Hey @the_rock,

Hope you're well!

Do you know if its possible to use the mgmt_cli api to pull these warnings out? We are looking to use policy presets to automate policy pushes, but the concern is warnings may get missed.

[the_rock]

Not that I know of mate, sorry. I believe thats built in.

Andy

[Maarten_Sjouw]

When you use mgmt_cli to push the policy, part of the the response will be the result you see in that window, this will be in the following header:

 stagesInfo:
  - type: "warn"
     stage: "legacy policy load"
     messages:
     - type: "warn" 
        message: "Anti-Spoofing is not configured for some interfaces and gateways....<SNIP>"

     - type: "warn"
        message: "Services port conflict. port 1074 (tcp) is assigned to <DaCryptic> and <epmap-listener-range>. This may cause unexpected behavior for connections that are matched on a rule with ‘Any’ in the service column. To resolve: clear the ‘Match for Any’ option in the ‘Advanced’ window for one of the services."

and so on....

[mr_maddy]

I would like to get these Info about save it in a text file, how can i accomplish this?

Specifically i want to retrieve stagesInfo and its sub Infos. 

Thanks for your help.

[PhoneBoy]

That sounds like debugging the policy installation process, which we have an SK for: https://support.checkpoint.com/results/sk/sk159452