Policy Installation Fails in Web VPM with "Error: Unknown tag"

Products

• ISG Proxy
• ProxySG Software - SGOS

Issue/Introduction

When attempting to install a policy using the Web VPM, the installation fails with multiple "Unknown tag" errors. These errors typically appear after a successful policy installation via the legacy Java VPM.

Example errors: 
Error: Unknown tag: 'Labs'
vpm-cpl:930:     condition=__CondList1Store Labs

Error: Unknown tag: 'Market_Custom'
vpm-cpl:1130:     condition=__CondList1Tops Market_Custom source

Symptoms:

• Policy compilation succeeds in Java VPM.
• Web VPM fails during the "Installing Policy" phase.
• The error points to a line in the generated CPL (vpm-cpl) where a condition name contains a space.

Environment

Edge SWG

Cause

This is caused by a discrepancy in how the Web VPM CPL generator handles object names. Unlike the Java VPM, certain versions of the Web VPM parser fail to wrap object names containing spaces in double quotes when generating the underlying CPL code.

Based on the example errors above, when the compiler encounters a line like condition=__CondList1Store Labs, it reads Store as the intended object but interprets the word Labs as a new CPL command tag. Since Labs is not a valid CPL keyword, the installation fails.

Resolution

To resolve this issue, object names must be modified by removing spaces.

1. Rename Objects: Locate the affected Condition Lists or Source/Destination objects in the VPM.

2. Remove Spaces: Rename the objects to use underscores, instead of spaces.

Example: Rename Store Labs to Store_Labs.

Example: Rename Tops Market_Custom source to Tops_Market_Custom_source.

3. Update Rules: Update any rules associated with the affected Condition Lists

4. Re-install: Click Install Policy via the Web VPM.