It is recommended to query configuration details using the following commands before modifying the configuration file.

1. Run the following command in the firewall device console to query the configuration details of all application control policy groups:

rw_cc -f /sfos/system/schema/config/networkplatform/config.appcontrol.schema -q -s policy.appcontrol.groups -p $

2. Run the following command to check if any configuration conflict exists:

rw_cc -f /sfos/system/schema/config/networkplatform/config.appcontrol.schema -q -s policy.appcontrol.groups -p '$[?(@.name == "default-policygroup" && @.isdefault != true)]'

3. If the returned result is not empty ([]), it contains conflicting configuration items.