All Products
Search
Document Center

Secure Access Service Edge:Policy validation issues

Last Updated:Mar 31, 2026

Policies you create in Secure Access Service Edge (SASE) don't take effect instantly. This article explains why and what to do if waiting doesn't resolve the issue.

My newly created policy isn't taking effect. Why?

This is expected behavior. SASE uses a 1-minute heartbeat to sync with the SASE client, and a newly pushed policy takes up to 5 minutes to propagate to a POP access point of Alibaba Cloud.

The following scenarios can occur:

  • Zero trust policies — access still fails after the policy is created

  • USB denylist policies — USB devices remain usable after the policy is pushed

  • Anti-uninstallation policies — the SASE client can still be uninstalled

  • Watermarking policies — watermarks don't appear after the policy is pushed

Wait 5 minutes, then verify whether the policy has taken effect.

My policy still isn't working after 5 minutes

If your policy does not take effect after 5 minutes, provide feedback and report logs.