Install Policy doesn't select Threat Prevention by default?

[stallwoodj]

Hi,

I have a customer with R80.30, one manager and one gateway (FW, VPN, CPMOB, APCL, URL, IA, IPS).

When the customer pushes their "Standard" policy, by default only the Network Access policy layer is ticked, not Threat Prevention.

In R77 there used to be a customization that I now can't see in Global Properties. Is there a way of setting both layers to be ticked by default in the install dialog?

Thanks

Jamie

[G_W_Albrecht]

Afaik, the selected policies from last install will be selected when doing another one. This is not true here ?

[stallwoodj]

Hi,

No, it always seems to reset to just Network Access layer. Policy has been inherited through multiple upgrades over the years.

Thanks

Jamie

[Tal_Paz-Fridman · Accepted solution]

Hi Jaime,

Which Install Policy button are you using in your flow - the one from the Access Control Policy or the main one?  If you use the one from Access Control it will always just mark Access Control and not Threat Prevention.

If you use the main Install Policy button it should remember the previous settings, including Threat Prevention.

HTH

Tal

[PhoneBoy]

What does mgmt_cli -r true show package name Standard (or whatever) show for the policy package in question?

[Vladimir]

If you select the Threat Prevention policy on the left [1], the contextual "Install Policy" [2] would have TP selected.