Support Center > Search Results > SecureKnowledge Details
Policy Verification fails to find overlapping rules
Symptoms
  • After upgrade to R77.30, any service without protocol is ignored by the verification code.

    Example:
    Verification fails for rules with HTTP service (has protocol), but will not fail for SSH (without protocol), though it should



  • Policy Verification error: "Rule 1 Hides rule 2 for services http"



  • If there are overlapping rules (one rule hides another), there is no policy verification warning. Verification succeeds though it should not.
Solution
Note: To view this solution you need to Sign In .