Support Center > Search Results > SecureKnowledge Details
SecureXL Drop Templates are not supported in versions lower than R76
Symptoms
  • SecureXL Drop Templates are not created, although this option was checked in SmartDashboard.

  • If SecureXL Drop Templates option was checked in SmartDashboard, policy installation in SmartDashboard might fail due to implied rules:

    Network Security R75 get_implied_rules_srvc_ranges: Failed to get service from reference
    Network Security R75 gen_one_implied_rule: Failed to get service ranges
    Network Security R75 gen_implied_rules: Failed to generate one rule
    Network Security R75 Failed to generate first implied rules
    Network Security R75 Failed to generate the rulebase
    Network Security R75 Operation failed, install/uninstall has been improperly terminated


  • Kernel debug (fw ctl debug -m fw + drop) shows the following drops:

    • fw_log_drop: Packet proto= ... dropped by module fw VM inbound at position 0
    • fw_log_drop: Packet proto= ... dropped by fw_handle_first_packet Reason: fw_rulematch
    • fw_log_drop: Packet proto= ... dropped by fw_handle_first_packet Reason: Rulebase drop - NO match


  • R75.40VS Security Gateway crashes during of policy installation / pushing of VSX configuration, when SecureXL is enabled.
    Function stack collected per sk31511 shows:

    EIP is at simi_ranges_create_ranges_list_once+... [simmod]
    Call Trace:
    [] htab_create+... [simmod]
    [] sim_range_db_init+... [simmod]
    [] simi_ranges_print_ip_range+... [simmod]
    [] cphwd_api_init+... [simmod]
    [] cphwd_api_init+... [simmod]
    ......
Cause

SecureXL Drop Templates are not supported in versions lower than R76.


Solution
Note: To view this solution you need to Sign In .