R81.10 Removing IPS

[Rob_Shears]

I have a R81.10 2 node GW cluster with 1x Mgmt server. At one point, it was in trial mode with IPS enabled. A current license was applied that does not include IPS so I'm trying to remove it. I get no errors/warnings when removing the blade - but anytime thereafter pushing a policy results in a yellow bar saying "There are Threat Prevention uninstall candidates in policy targets".

No combination of following these two sk's seems to work and TAC are dragging their feet on this one a bit.


https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut....

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

I also don't see this ""uninstall TP policy: when pushing policy."" option, unless they just mean the yellow box itself.

The big yellow box won't pass the supervisors sniff test to put it into production.

Any ideas?

[the_rock]

And what you get looks exactly like the screenshot from the first link you included?

Andy

[Rob_Shears]

Screen shot under Solution in the 2nd link is the "warning" I'm trying to get rid of.

[the_rock]

Sorry, I got nothing...what did TAC say?

[Rob_Shears]

Sent me a list of seemingly unrelated SKs 😞

[Vladimir]

Have you unchecked the Threat Prevention in the policy package/layer properties?

[Rob_Shears]

Yes

[H4ppyM3]

Did you resolve this issue ? I face the same problem 😞