Security

when i attempt to add user role , there is no (add) button under firewall policy and the (apply ) button is not activated

Did you just upgrade?  Do you have the policy enforcement licence installed?

 

upgrade was 3 months ago , i don't know any thing about licence enforcement

If you don't have the policy enforcement license, you cannot create roles.

 

sorry , i have apolicy but i can't creat user role

 

is it possible that you are trying to create a user role on a local controller, instead of the master controller?  You cannot create roles on a local controller; only the master.

 

no it is the master controller . so if i want to activate the current licence ,what should i do?

 

The Policy Enforcement License is an option.  You should open a support case to see if your controller ever had that license.

 

Make sure you have a PEF license installed (Configuration -> Network -> Controller -> Licenses), since firewall feature sets are included only with the PEF or PEF-NG licenses.
 
Hope this helps!
 
- Jay