implied_rules.def for R82.10 / 3900 series appliances

[FXB]

Hi Checkmates,

we are currently having 3950 appliances as PoC hardware and are trying to get our usual configurations going.

As you might be aware they are running R82.10 as firmware since that added the support for ARM chips. Our management is running R82 Take 41.

I noticed today that the gateways do not get our customized implied_rules or crypt.def files from the management. I checked on the management to see if there is a dedicated folder for R82.10 to make those changes but had no luck.

Normally if u modify $FWDIR/lib/implied.rules.def those changes get pushed to gateways of the same major version as the management (R82 management to R82 gateways in our case). Since R82.10 dont exist yet for management and there is no dedicated R82.10 folder in /opt I am a bit confused on what file to edit to get those changes to the new 3900 appliances.

Anyone of you already have your hands on the new appliances and any clue how to get those changes to the gateways? 

Thank you!

[the_rock]

I had a customer with this issue and they had TAC help them, but no idea what was done, sorry. If you open the support case and explain the situation, Im sure they will be able to assist.

Best,

Andy

[PhoneBoy]

When your gateways and management on different versions, you need to edit files in the relevant "Backward Compatibility" directory, which are located in /opt.
The directory name, which I don't know exactly, should have 8210 in its name. 

[FXB · Accepted solution]

I contacted TAC and it turns out that the "default" file on the management server ($FWDIR/lib/implied_rules.def) is also beeing used for R82.10 3900 appliances. However you should make sure to turn off policy installation acceleration since those files are not beeing transfered when this is active.