Sometimes, when you are migrating the SKYATP configuration with the policy enforcer, you may need to replace the new threat prevention policy created via policy enforcer. This article explains how to automate the task if the old threat prevention policy is assigned to multiple rules

Please run the below mysql query to automate this:

 mysql -ujboss -p$(grep mysql.jboss /etc/sysconfig/JunosSpace/pwd | awk -F= '{print $2}') sm_db -e "update DCRuleEntity set threatPolicyEntity_id = (select id from ThreatPolicyEntity where name='ThreatPrevetionPolicy in SD/PE') where threatPolicyEntity_id = (select id from ThreatPolicyEntity where name='ThreatPrevetionPolicy in the Device')"

If the changes are not reflected in the preview changes, please follow the below steps:

++ Clone the Firewall policy

++ Unassign the device from the Firewall policy.

++ Assign the device to the cloned policy and check the preview changes

Note: Please take VM snapshot/Database backup before performing the above steps