SecureXL Drop Templates are not created, although this option was checked in SmartDashboard.
If SecureXL Drop Templates option was checked in SmartDashboard, policy installation in SmartDashboard might fail due to implied rules:
Network Security R75 get_implied_rules_srvc_ranges: Failed to get service from reference Network Security R75 gen_one_implied_rule: Failed to get service ranges Network Security R75 gen_implied_rules: Failed to generate one rule Network Security R75 Failed to generate first implied rules Network Security R75 Failed to generate the rulebase Network Security R75 Operation failed, install/uninstall has been improperly terminated
Kernel debug (fw ctl debug -m fw + drop) shows the following drops:
fw_log_drop: Packet proto= ... dropped by module fw VM inbound at position 0
fw_log_drop: Packet proto= ... dropped by fw_handle_first_packet Reason: fw_rulematch
fw_log_drop: Packet proto= ... dropped by fw_handle_first_packet Reason: Rulebase drop - NO match
R75.40VS Security Gateway crashes during of policy installation / pushing of VSX configuration, when SecureXL is enabled. Function stack collected per sk31511 shows:
