Checkpoint R81.10 Policy installation with warnings

[IFB-Jeff]

We recently upgraded our Active/Standby gateways & management server to R81.10.

When I do a Policy Push/Install - I get  "Successful w/warnings" 

How do I display what the warnings are ?  

When we were R80.20 it showed the details in the Policy Push window

[the_rock]

There is always little arrow pointing down in the policy install window that would show you that.

[IFB-Jeff · Accepted solution]

Thanks !  

I clicked on it and it expanded with the warnings 

[the_rock]

Good job!

[AaronCP]

Hey @the_rock,

Hope you're well!

Do you know if its possible to use the mgmt_cli api to pull these warnings out? We are looking to use policy presets to automate policy pushes, but the concern is warnings may get missed.

[the_rock]

Not that I know of mate, sorry. I believe thats built in.

Andy

[Maarten_Sjouw]

When you use mgmt_cli to push the policy, part of the the response will be the result you see in that window, this will be in the following header:

 stagesInfo:
  - type: "warn"
     stage: "legacy policy load"
     messages:
     - type: "warn" 
        message: "Anti-Spoofing is not configured for some interfaces and gateways....<SNIP>"

     - type: "warn"
        message: "Services port conflict. port 1074 (tcp) is assigned to <DaCryptic> and <epmap-listener-range>. This may cause unexpected behavior for connections that are matched on a rule with ‘Any’ in the service column. To resolve: clear the ‘Match for Any’ option in the ‘Advanced’ window for one of the services."

and so on....