Description

This article outlines possible reasons why configured application policies are not successfully pushed or applied to WAN Edge devices (SRX) in a Mist-managed environment.

Symptoms

Application policies are configured in Mist; however, they are not applied on the SRX device as expected.

Solution

Policy push failures are often due to configuration validation errors. These errors commonly occur when:

  • Referenced applications are not predefined or recognized
  • Referenced network objects do not exist or are not properly defined

These issues prevent the configuration from being successfully compiled and pushed to the device.

  1. Check API Output for Errors
    Use the Mist API to retrieve the configuration being pushed to the device. Errors are typically displayed at the end of the output.

  2. Use the API Chrome Extension

    • Open the Mist API Chrome extension
    • Run the “Gateway cmd” API
    • Review the output for any errors listed at the bottom

  3. Identify Invalid References

    • Look for application names or network objects mentioned in the error section
    • Verify whether these objects are properly defined in Mist

  4. Correct the Configuration

    • Define missing applications or network objects
    • Update the policy to reference valid, existing entries

 

Modification History

2024-07-29 : Article Created