SIC

[jus_soul]

Hello! I have some problem with install unified policy. When I want to install policy on A-GW and B-GW, I got errors: Layer "DMZ traffic": The Intranet Community member A-GW must have a signed certificate and Policy verification failed on both gateways.

How I can fix this error?

Thank you for your helping!

[_Val_]

You need SIC to be established before you can install policy. Go to that GW object and establish SIC. 

[jus_soul]

I did it, but it still gives an error.  I reset SIC, then enter new OTP, but nothing

[jus_soul]

Thank you for your answer, but but it still gives an error. We already have trust established

[the_rock]

Did you try what @Tal_Paz-Fridman suggested? To me, it implies cert might be expired. Lets do quick remote if you are allowed and I can check it for you.

Andy

[Tal_Paz-Fridman]

It seems that for some reason the Security Gateway in the Community does not have a certificate.

You might want to try to add or renew the VPN Certificate (or enable / disable IPsec VPN Blade):

Security Gateway object > IPsec VPN > Add or Renew

[_Val_]

@jus_soul, please do what @Tal_Paz-Fridman suggests. It seems A-GW does not have a VPN certificate. 

[Lesley]

Note that you need vpn cert even if you do not have vpn blade enabled. If so temporarily enable vpn blade renew cert and disable blade again.

[the_rock]

Very true!

[the_rock]

I would certainly verify what both @Tal_Paz-Fridman and @_Val_ mentioned. Dont worry about warnings, you can ommit those for now, as they never cause policy to fail, its the actual error.

Andy