<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Network Group locked for deletion in Firewall &amp; Security Management</title>
    <link>https://community.checkpoint.com/t5/Firewall-Security-Management/Network-Group-locked-for-deletion/m-p/60796#M84366</link>
    <description>&lt;P&gt;Hi Guys,&lt;/P&gt;&lt;P&gt;an API script adding new hosts then editing a group object has broken for some reason, session was disconnected but not discarded so seems that has locked the group and i'm not able to publish or discard the locked changes anymore,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;following script didn't help:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;#!/bin/bash&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;mgmt_cli login -r true &amp;gt; id.txt; current_sid=$(mgmt_cli show session -s id.txt -f json | $CPDIR/jq/jq .uid); for sid in $(mgmt_cli -s id.txt show sessions details-level full -f json | $CPDIR/jq/jq '.objects[] | select ( .["application"] | contains ("WEB_API")) | .uid' | grep -v ${current_sid}); do mgmt_cli discard uid ${sid} -s id.txt ; done; mgmt_cli logout -s id.txt&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;would anyone please advise in that ?&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;i've attached the locked object and the sessional list&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Capture1.PNG" style="width: 999px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/2229iCD4552E4FABFAF6D/image-size/large?v=v2&amp;amp;px=999" role="button" title="Capture1.PNG" alt="Capture1.PNG" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="no_sessions_disconnected.PNG" style="width: 936px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/2230i9A135D0E0CB3196F/image-size/large?v=v2&amp;amp;px=999" role="button" title="no_sessions_disconnected.PNG" alt="no_sessions_disconnected.PNG" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 21 Aug 2019 03:44:57 GMT</pubDate>
    <dc:creator>Ismail_Eltahawy</dc:creator>
    <dc:date>2019-08-21T03:44:57Z</dc:date>
    <item>
      <title>Network Group locked for deletion</title>
      <link>https://community.checkpoint.com/t5/Firewall-Security-Management/Network-Group-locked-for-deletion/m-p/60796#M84366</link>
      <description>&lt;P&gt;Hi Guys,&lt;/P&gt;&lt;P&gt;an API script adding new hosts then editing a group object has broken for some reason, session was disconnected but not discarded so seems that has locked the group and i'm not able to publish or discard the locked changes anymore,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;following script didn't help:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;#!/bin/bash&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;mgmt_cli login -r true &amp;gt; id.txt; current_sid=$(mgmt_cli show session -s id.txt -f json | $CPDIR/jq/jq .uid); for sid in $(mgmt_cli -s id.txt show sessions details-level full -f json | $CPDIR/jq/jq '.objects[] | select ( .["application"] | contains ("WEB_API")) | .uid' | grep -v ${current_sid}); do mgmt_cli discard uid ${sid} -s id.txt ; done; mgmt_cli logout -s id.txt&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;would anyone please advise in that ?&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;i've attached the locked object and the sessional list&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Capture1.PNG" style="width: 999px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/2229iCD4552E4FABFAF6D/image-size/large?v=v2&amp;amp;px=999" role="button" title="Capture1.PNG" alt="Capture1.PNG" /&gt;&lt;/span&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="no_sessions_disconnected.PNG" style="width: 936px;"&gt;&lt;img src="https://community.checkpoint.com/t5/image/serverpage/image-id/2230i9A135D0E0CB3196F/image-size/large?v=v2&amp;amp;px=999" role="button" title="no_sessions_disconnected.PNG" alt="no_sessions_disconnected.PNG" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 21 Aug 2019 03:44:57 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-Security-Management/Network-Group-locked-for-deletion/m-p/60796#M84366</guid>
      <dc:creator>Ismail_Eltahawy</dc:creator>
      <dc:date>2019-08-21T03:44:57Z</dc:date>
    </item>
    <item>
      <title>Re: Network Group locked for deletion</title>
      <link>https://community.checkpoint.com/t5/Firewall-Security-Management/Network-Group-locked-for-deletion/m-p/60896#M84367</link>
      <description>So your API session is not showing in SmartConsole either?&lt;BR /&gt;May need to get the TAC involved.</description>
      <pubDate>Wed, 21 Aug 2019 20:25:12 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-Security-Management/Network-Group-locked-for-deletion/m-p/60896#M84367</guid>
      <dc:creator>PhoneBoy</dc:creator>
      <dc:date>2019-08-21T20:25:12Z</dc:date>
    </item>
    <item>
      <title>Re: Network Group locked for deletion</title>
      <link>https://community.checkpoint.com/t5/Firewall-Security-Management/Network-Group-locked-for-deletion/m-p/60905#M84368</link>
      <description>&lt;P&gt;no not like everytime session got distrubted, this time it's not showing in the smartconsole !&lt;/P&gt;&lt;P&gt;yes will involve the TAC maybe&lt;/P&gt;</description>
      <pubDate>Thu, 22 Aug 2019 01:05:33 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Firewall-Security-Management/Network-Group-locked-for-deletion/m-p/60905#M84368</guid>
      <dc:creator>Ismail_Eltahawy</dc:creator>
      <dc:date>2019-08-22T01:05:33Z</dc:date>
    </item>
  </channel>
</rss>

