Support Center > Search Results > SecureKnowledge Details
On cluster, Drop templates are disabled on reboot
Symptoms
  • On cluster member, Drop templates are disabled in reboot or cpstop ; cpstart. The status is shown as: "disabled by firewall".

    Example:
    [Expert@Hostname:0]# fwaccel stat
    
    Accept Templates : enabled
    Drop Templates : disabled by Firewall
    NAT Templates : enabled
    
  • Pushing policy manually solves the issue.
Cause

While initializing drop templates, SecureXL is checking if clustering is up. Due to an issue with mistiming of SecureXL and cluster initialization drop templates are being disabled.


Solution
Note: To view this solution you need to Sign In .