different version between security gateway and management - issue with implied_rules.def

[Antoine_BELLEC]

Hello,

I updated recently our Security Management from R80.40 to R81.10, all others security gateway are still in R80.40

Every time I update the security management I must edit the $FWDIR\lib\implied_rules.def to comment "#define ENABLE_LDAP_SERVER", this is needed to allow some of my vpn users to authenticate when they connect to a gateway with no dc behind.

Since the update I can see that changes in implied_rules  are not push to the security gateway.

I think the root cause is that I dont have /opt/CPsuite-R80.40/ folder anymore on my security management

If I'm correct, is there a way for my Security Management to apply the implied_rules.def to my security gateways without updating them?

Thanks a lot

[_Val_ · Accepted solution]

From R81 Admin Guide:

Location of files on an R81 Security Management Server:

Version of the Target Security Gateway	Location of the File
R81	$FWDIR/lib/implied_rules.def
R80.40	/opt/CPR8040CMP-R81/lib/implied_rules.def
R80.30SP on Maestro	/opt/CPR8040CMP-R81/lib/implied_rules.def
R80.30	/opt/CPR8040CMP-R81/lib/implied_rules.def
R80.20SP on Maestro, or Chassis	/opt/CPR8040CMP-R81/lib/implied_rules.def
R80.20	/opt/CPR8040CMP-R81/lib/implied_rules.def
R80.20.x on Quantum Spark Appliances 1500 / 1600 / 1800	/opt/CPSFWR80CMP-R81/lib/implied_rules.def
R80.10	/opt/CPR8040CMP-R81/lib/implied_rules.def
R77.30	/opt/CPR77CMP-R81/lib/implied_rules.def
R77.20.x on 1100, 1200R, 1400 Appliances	/opt/CPSFWR77CMP-R81/lib/implied_rules.def

[Antoine_BELLEC]

You really make my day 🙂

Thanks a lot & have a nice day

[_Val_]

We are here to help. I am glad it works for you. If not, let me know.