Negate access role no longer possible?

[abihsot__]

Management R81.10

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_IdentityAwareness_AdminGuide...

[Chris_Atkinson]

Can you please share a screenshot of the rule you tried, you negated the actual object?

[abihsot__]

I am not aware how you can negate object. I negated cell, which contains only access role and management doesn't allow to publish changes where consequently no policy installation is possible.

[abihsot__]

example rule.

[G_W_Albrecht]

This is the only way to get which result ? Looks like you want to drop all sources that are not your test-access-role. So better use two rules: test-access-role any any any allow and any any any any drop...

[abihsot__]

This is just an example rule as it was requested.

The point here is that documentation contradict to what you get in management. It was long time ago, but I am pretty sure it worked in previous versions.

[Tal_Paz-Fridman]

I have sent a request to the relevant R&D owner and will update.

[Tal_Paz-Fridman]

This is indeed the correct behavior. 

I will make sure it is updated in all the administration guides.

Tal

[the_rock]

It did work 100%. I remember customer doing this in R80.20 version just fine.