It is recommended to query configuration details using the following commands before modifying the configuration file.

1. Run the following command in the firewall device console to query the configuration details of all local ACL policies:

rw_cc -f /sfos/system/schema/config/networkplatform/config.appcontrol.local.schema -q -s policy.appcontrol.local.policys -p $

2. After the upgrade, the default local ACL policy named "Default Permit Policy" will be automatically renamed "default-allow", and the default local ACL policy named "Default Deny Policy" will be automatically renamed "default-deny".

3. Perform the following steps to check if any configuration conflict exists (taking default-allow as an example):

1. Run the following command to query if any local ACL policy is named "Default Permit Policy":

rw_cc -f /sfos/system/schema/config/networkplatform/config.appcontrol.local.schema -q -s policy.appcontrol.local.policys -p '$[?(@.name == "Default Permit Policy")]'

2. If a local ACL policy named "Default Permit Policy" exists, run the following command to query if any local ACL policy named "default-allow" exists:

rw_cc -f /sfos/system/schema/config/networkplatform/config.appcontrol.local.schema -q -s policy.appcontrol.local.policys -p '$[?(@.name == "default-allow")]'

3. If the returned result is not empty ([]), it contains conflicting configuration items.