Errors pushing updated UPE policy to WSS

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

WSS managed with UPE/Management Center

Push an updated WSS policy fails with errors reported below.

"Failed to install policy "Policy_Name" version "Policy_Version" to device "Device_Name:

The device returned the following message:

0 warnings and 20 errors

Unknown tag: 'U' tenant:2594: #.#.#.#U U U 
Unknown tag: 'U' tenant:2603: #.#.#.#U U U 
Unknown tag: 'U' tenant:2609: #.#.#.#U U U U 
Unknown tag: 'U' tenant:2610: #.#.#.#U U U 
Unknown tag: 'U' tenant:2615: #.#.#.#U U U 
Unknown tag: 'U' tenant:2616: #.#.#.#U U U 
Unknown tag: 'U' tenant:2660: #.#.#.#U U 
Unknown tag: 'U' tenant:2665: #.#.#.#U U U U 
Unknown tag: 'U' tenant:2681: #.#.#.#U U U U U
Unknown tag: 'U' tenant:2693: #.#.#.#U U
Unknown tag: 'U' tenant:2715: #.#.#.#U U 
:
Unknown tag: 'U' tenant:2776: #.#.#.#U U U U U"

Note: #.#.#.# used to mask a number of different IP addresses that are part of the policy.

Environment

Management Center used to administer WSS

Happens Independently of WSS Access Methods

Cause

Corrupted policy.

Resolution

Removed the characters following the IP addresses above from the WSS policy and re-applied.

Not sure how characters added originally.