0) Make sure you are running ipso version 3.7.1 build 004 on both Nokia boxes and have VRRP running properly,
1) run cpconfig on both the nokia and re-SIC,
2) make sure the licence on both the Nokia boxes are correct. I would use eval license since I know it always works,
3) perform a "cprestart" on the Nokia boxes. Make sure that the firewall daemon is up and running on both boxes,
4) perform a "fw unloadlocal" on both nokia boxes.
5) re-establish SIC between the Management Server and the Nokia boxes. Test your SIC and make sure they do communicate. Create an gateway cluster and add these Nokia boxes into that gateway cluster.
Here is what we found out. Under Smart Defense, Application Intelligence, WEB uncheck General HTTP Worm catcher, and then Install the policy, go back to Smart Defense and then enable the Worm Catcher, and then reinstall the policy.