topic Re: debug policy install on cli? in Firewall and Security Management

debug policy install on cli?

Hugo_vd_Kooij — Tue, 28 Mar 2017 11:47:49 GMT

How can one do the debug of a policy install like I could do this up to R77.30?

There it was just a matter of running : fwm -d local .....

But I could not find a R80 equivalent

PhoneBoy — Wed, 28 Jun 2017 02:31:06 GMT

fwm load won't operate in R80+, you have to use the mgmt_cli to load policy now, documented here: Check Point - Management API reference

https://community.checkpoint.com/people/ubialbf7dd8c7-dd84-3fc4-99ca-eec4929a35ad‌ do you know if there is a "debug" flag you can give to the install-policy command?

Norbert_Bohusch — Wed, 05 Jul 2017 12:23:57 GMT

sk112111 outlines how to debug policy installation in R80+. If you want you can do the install through UI or using mgmt_cli.

Hope this helps!

_Val_ — Fri, 07 Jul 2017 14:48:53 GMT

thanks for sharing.

prisciltetchou1 — Wed, 27 Oct 2021 11:00:40 GMT

Hello,

Any update on this as I have no access to this sk (sk112111) ?

Tal_Paz-Fridman — Wed, 27 Oct 2021 11:58:17 GMT

You can run the load command using Management API:

Then tail the following files on the Security Management Server:

tail -f $MDS_FWDIR/log/install_policy.elg

tail -f $MDS_FWDIR/log/cpm.elg

You can also try to debug the fetch policy flow from the Security Gateway side

Also, based on the errors you receive see if the following SK helps - sk33893: