Management Center unable to push policy to WSS

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Management Center (MC) is failing to push the policy to the WSS tenant.

MC logs show a HTTP Status Code 413

"POST /appliance/management_center/policy/universal/deploy HTTP/1.1" 413

Environment

WSS with Universal Policy Enforcement (UPE) as policy source

Management Center

Cause

The policy size too large and is hitting the database query size limit.

A 413 return code indicates that the incoming policy is larger than 15MB in size.

This is a hard limit and cannot be changed. 

Resolution

The policy size needs to be reduced to a size less than 15 MB.

To avoid large policies it is recommended to utilize categories instead of large lists of specific URLs, domains and IP addresses.