After using the "Get Interfaces without Topology" button in the Network Management tab of a gateway, interfaces that were configured with Anti-Spoofing "Disabled" are changed to "Enabled" with action "Prevent". Installing policy with the interfaces in this condition can result in dropped traffic.
Cause
Management server is still performing the basic topology fetch and reseting the interfaces to default of "Enabled" with action set to "Prevent"