cannot intall policy with this error “Policy changes audit log was requested”

[xiejf]

hi,all

this error when i install policy,I didn't find any information about this error.

the sercurity managment server verison is r81.20 

[the_rock]

Cant find much on support site...have you tried cpstop;cpstart or rebooting the mgmt server?

Andy

[Chris_Atkinson]

Which JHF take is the Management server running, is SmartTasks or Approval Cycle configured / used and what type of gateway is the target?

[Jarvis_Lin]

I’ve encountered this before, but I forgot the details of how I handled it. My impression is that after replacing the firewall and using the same objects to rebuild the SIC, the rules could not be installed.

You can try installing the original policy package first or modifying the rules in the original policy package before installation. Alternatively, you can also attempt to install without using the accelerated installation option.

[Chris_Atkinson]

Agreed sk168055 might be helpful here...

[Tal_Paz-Fridman]

As a workaround use the Management API to install the policy.

https://sc1.checkpoint.com/documents/latest/APIs/#cli/install-policy~v2%20 

Then see if the issue reproduces again in SmartConsole.

I will forward this to relevant R&D owners to see how to find the root cause.

[xiejf]

Hi,all
Thanks for all the suggestions. I tried disabling Install Policy Acceleration, but it didn't work. I will try restarting the management server or modifying some policies.

[Tal_Paz-Fridman]

Please try the workaround that I suggested as it was used in similar cases.

[Greg01]

Hi there,

I had the same issue (mgmt and gw in R81.20) when I would like to install a different policy package, after a long time without any installation. I solved the issue with an installation of current policy package, then installation of new policy package.