policy installation failed

[tavi0906]

policy installation failed with the error message : " failed to create product policy life "

how to troubleshoot ?

[the_rock]

Never seen that error before. What version is this? Can you verify SIC works fine and you can do fw fetch from gateway itself? Maybe try do last revision from when policy did work and see if that helps.

Andy

[tavi0906]

version  r81.10 and SIC works fine 

[Tal_Paz-Fridman]

Can you please add an attachment of the exact message? 

[tavi0906]

now getting some other error during the policy installation.

error " failed to download security policies on <xxxxx> ( gateway hostname)

[the_rock]

Does this command work? Say mgmt IP is 10.10.10.10, from gateway expert mode run -> fw fetch 10.10.10.10

Andy

[tavi0906]

ya i have run that and fetched to latest policy and tried to install the policy but no use same error.

[the_rock]

Honestly, if I were you, I would pick up the phone and call TAC and get remote going, tell them its an urgent issue, because it is.

Andy

[Jeff_Post]

Did you just upgrade to R81.10?  If so did you change the version in the management console to R81.10.  We had this issue when we were upgrading.  I had to manually change the cluster to R81.10, then push policy checking the box to allow a separate policy install to each cluster member, even if one cluster member fails (as it would since it hadn't been upgraded to R81.10 yet)

Jeff

[the_rock]

Thats good point, BUT...Im fairly sure error always used to specifically say that version was not matching when that was the case. No idea if thats been the case in R80+, as I never encountered it since R77.30

Andy

[tavi0906]

i have checked this and  version is r81.10.

[_Val_]

Please open a TAC case via https://hepl.checkpoint.com