Policy Push Fails from Management Center to Edge SWG with Mismatched SGOS Versions

Products

• ISG Proxy
• Management Center
• Management Center - VA
• ProxySG Software - SGOS

Issue/Introduction

When pushing a Visual Policy Manager (VPM) policy from Management Center to an Edge SWG appliance running a different SGOS version than the assigned Reference Device, the push fails with the following error: The OS version associated with this policy does not match the OS version on the Reference Device.

Environment

    Edge SWG: 7.3.x, 7.4.x
    Management Center: 3.x 

Cause

Management Center compiles and validates VPM policies against the specific SGOS schema and CPL dictionary of the policy's assigned Reference Device. MC does not allow a single VPM policy object to be pushed across target proxies running different major/minor SGOS releases.

Resolution

Standardize SGOS Version Across Target Proxies 

1. Upgrade or downgrade the target Edge SWG appliances so all proxies in the managed group run the exact same SGOS version.

2. In Management Center, go to Configuration > Policy > Existing Policy.

3. Select the VPM policy and set the Reference Device to one of the updated appliances.

4. Click Launch VPM Editor.

5. Click Save Policy (without making changes) to recompile the policy against the updated schema.

6. Push the policy to all target appliances.