Support Center > Search Results > SecureKnowledge Details
Policy verification failure on rule hiding rule after direct upgrade to R77.30/R80.10/R80.20 Technical Level
Symptoms
  • Policy verification fails on rule hiding rule after upgrade from R77.20 (and below) directly to R77.30, R80.10 or R80.20, while on R77.20 policy verification worked.

  • Verification errors example:
    Verification of policy [name] completed with errors
    Error: Layer [name]: Rule [number] Hides rule [number] for Services & Applications: Bioner-Setup . 
                         Rule [number] Hides rule [number] for Services & Applications: tcp_3181 .
                         Rule [number] Hides rule [number] for Services & Applications: ntp-tcp, ntp-udp .
                         Rule [number] Hides rule [number] for Services & Applications: TCP-1828 .
    
Solution

No fix is required; the system is functioning as designed: verification logic for finding hiding rules was changed in R77.30 and R80.x.

Manually modify the hiding rules listed in the error message to be able to install the upgraded rulebase.

Note that this failure can be detected before the upgrade by using the R80.x Upgrade Verification and Environment Simulation service.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment