[mcnallym]

Silly question, but when you say firewall, is it definitely a SMARTCenter as well on the box.

If the box is a SMARTCenter as well then has the policy been updated, as whilst I find on a SMARTCenter the GUI CLient update takes place without a policy push, if the box is a Firewall as well then it requires a policy push.