Policy verification failure on rule hiding rule after direct upgrade to R77.30/R80.10/R80.20
||Quantum Security Management, Multi-Domain Management
||R77.30, R80.10, R80.20, R80.30
- Policy verification fails on rule hiding rule after upgrade from R77.20 (and below) directly to R77.30, R80.10 or R80.20, while on R77.20 policy verification worked.
- Verification errors example:
Verification of policy [name] completed with errors
Error: Layer [name]: Rule [number] Hides rule [number] for Services & Applications: Bioner-Setup .
Rule [number] Hides rule [number] for Services & Applications: tcp_3181 .
Rule [number] Hides rule [number] for Services & Applications: ntp-tcp, ntp-udp .
Rule [number] Hides rule [number] for Services & Applications: TCP-1828 .
No fix is required; the system is functioning as designed: verification logic for finding hiding rules was changed in R77.30 and R80.x.
Manually modify the hiding rules listed in the error message to be able to install the upgraded rulebase.
Note that this failure can be detected before the upgrade by using the R80.x Upgrade Verification and Environment Simulation service.