unable to install policy per mgmt_cli - error incompatible policy

[FireMage]

hello @All

i am quite new here and hope you can help me.

i have a huge problem. i have a Gaia R80.20 as single deployment (management & enforcement together) in use. this has booted at once and after reboot it had my required policy no longer loaded. the default policy (fw stat) gave me but no way to get to the checkpoint. neither to the gaia nor via smart dashboard to the management. so i went directly to the console and tried to reload it via mgmt_cli install-policy policy-package work (work is the name of the policy). unfortunately this went wrong. the following error message appeared:

... policy version are incompatible. disable accelerated install policy ... see SK168055

well, i thought. there must be an option in mgmt_cli to disable the acceleration. just like in dashboard. but unfortunately i didn't see anything.

therefore 2 questions:

- how can i change the defaultpolicy so that i have at least the minimal rules in there to restore a backup and get to the management? i created my own policy (emergency). how can i make sure that it is ALWAYS loaded in case of doubt.

- how do i get my policy loaded when this incompatibility error occurs?

thank you very much
jeff

[PhoneBoy · Accepted solution]

DefaultFilter and InitialPolicy cannot be changed.

Ensure the gateway is not connected to the Internet and do an "fw unloadlocal" to unload the policy temporarily.
Note: this means no access policy is being enforced!
You should then be able to connect with SmartConsole and make the required changes to install the policy successfully.

[FireMage]

Hello PhoneBoy,

that's great.

thank's so much.

jeff

[the_rock]

Phoneboy brings up a very good point. If you unload the policy, you can then make necessary changes from smart console, which would be accessible at that time.