This article describes a particular problem where CSO portal shows policies ( SDWAN , Firewall ,NAT etc) deployment status as undeployed even though respective policy rules are successfully deployed to the site . 

• CSO SaaS or On-prem deployment installed with CSO 6.3  version Patch10. 
• Tenant User deployed SDWAN ,  Firewall ,  Nat policies etc.
• User navigates to particular site in CSO portal through Resources -> Site Management -> Site -> Policies  and observes the respective polices i,e SDWAN, Firewall etc shows as undeployed as shown below.

Root Cause: 

• There is bug identified in the backend policy management api  ( i,e  policy-mgmt/list-bulk-collection) when  extracting rule summary for a particular site , where site UUID is wrongly formed in the api payload. 

For example if the site uuid is 4266a867-2d54-4dd3-95d2-2a321af2d9ed then following wrong syntax will be observed in error condition when user tries to click policies page for a site in CSO portal.. 

Wrong Syntax:
[{"terms": {"site_uuid._raw": ["4", "2", "6", "6", "a", "8", "6", "7", "-", "2", "d", "5", "4", "-", "4", "d", "d", "3", "-", "9", "5", "d", "2", "-", "2", "a", "3", "2", "1", "a", "f", "2", "d", "9", "e", "d"]}}]}}]}}}
 
Expected Syntax:
[{"terms": {"site_uuid._raw": “4266a867-2d54-4dd3-95d2-2a321af2d9ed” ]}}]}}]}}}


Solution : 

Policy management micro service code is fixed in CSO 6.3 patch11.