SFR access control policy

[adamgibs7]

Dears,

you may be thinking what I am speaking is not logic but it is happening with me

Problems:

I have exempted certain mangers from restrictions  and they are hitting to the proper policy and things are working fine, as soon as I make a additional policy for deny any any from inside to outside zone , managers and users traffic starts hitting the deny policy and things get blocked,

Please find the attached error is it this error is making a problem.

[yogdhanu · Accepted solution]

Hi

The error screenshot and problem seems not connected.

The error that you get may be because a Realm for which some user based rules were created are there in the access control policy but the realm is already deleted.

You would need to delete the reference user based rules from ACP which point to deleted realm.

I assume with this error, you cannot deploy policy. With that, creating a deny rule should not affect anyone because the rules are not deployed.

May be I didn't get the problem right.

Hope this helps,

Yogesh

[adamgibs7]

Dear Yogdhanu,

the rules get deployed and they become active even by the hit counts this means the error is not affecting.

I have only one relam and no such user groups are deleted on daily basis hence I was mentioning the managers rule  in which I am calling the managers their group has not changed from many years

thanks

[yogdhanu]

Hi

Can you share the actual rules screenshot?

Or may be do system support firewall-engine debug or system support trace (if above 6.2) and check how the traffic is matched against the rules. That would give us some more idea on whats happening.