Policy verification failed.

[nflnetwork29]

Is it permitted to have the application & URL filtering blade at the layer 1 position?

When i try to push policy to my pre R80 gateway i get the following error. 

Gateway: SMB1430_GW
Policy: Standard
Status: Failed
- Application and URL Filtering Policy must have 'Applications & URL Filtering' blade enabled before you can install on gateways earlier than version R80.10.
- Policy verification failed.
--------------------------------------------------------------------------------

I have enabled the blades. Not sure why it says to make sure the blade is enabled. 

[nflnetwork29]

if i move network to layer 1 and application/URL to layer 2 the policy install works fine. 

[PhoneBoy · Accepted solution]

Pre-R80 gateways have different layers for firewall and App Control rules and the firewall layer must be first.
This also applies to SMB gateways as well.