topic Re: I cannot delete gateway object in Firewall and Security Management

I cannot delete gateway object

Baasanjargal_Ts — Tue, 21 May 2019 07:18:22 GMT

I cannot delete gateway object. Because it is used on the Objects (gatewayStaticprofilesConfiguration ->Assignment Profiles).

I don't know how to delete that object.

Re: I cannot delete gateway object

SDE_License_Acc — Thu, 23 May 2019 10:50:18 GMT

Hi Nickel,

Having exactly the same issue - have you managed to solve this?

Thanks

Re: I cannot delete gateway object

Jerry — Thu, 23 May 2019 12:36:57 GMT

that isn't complicated mate

you need to find relationships and dependencies then you'll be able to remove it

look at the hings SmartConsole giving you. It is pretty logical to some extent.

Re: I cannot delete gateway object

Daniel_Taney — Thu, 23 May 2019 13:23:10 GMT

I'll be honest, I have not used Profiles, so I can't speak with any first hand experience here but I think this has to do with SmartProvisioning being used to configure the Gateway.

Take a look at this link: https://sc1.checkpoint.com/documents/R77/CP_R77_SmartProvisioning_WebAdmin/16735.htm

Click the Menu button in SmartConsole and select SmartProvisioning. I would look around in there and see if the GW you are trying to remove has a profile attached to it. Since this functionality isn't incorporated into SmartConsole yet, it may not be obvious that something in it needs cleaning up. But my guess is what you are looking for is in there somewhere!

Good luck!

Re: I cannot delete gateway object

Nüüül — Thu, 23 May 2019 13:29:58 GMT

Hi,

I had a similar one. Ended in opening TAC. They then did some psql magic or so and made the object then removable.

Something like that but deleting it: https://community.checkpoint.com/t5/General-Management-Topics/psql-client-cpm-postgres-fromversion-toversion-output/td-p/36116 - BUT - DO NOT DO THIS ON YOUR OWN, as @Tomer_Sole mentioned there.. 🙂

Cheers

Daniel

Re: I cannot delete gateway object

Nathan_Ressel — Fri, 23 Aug 2019 09:23:37 GMT

As mentioned above it is due to a policy that still references the old gateway. When I ran into this issue, removing a IaaS Gateway, I eventually found a rule that still was being installed on the old Gateway within Mobile Access. The Mobile Access blade threw an error while I was trying to remove all blades when I first received the (gatewayStaticprofilesConfiguration ->Assignment Profiles) error.

This occurs because under Threat Prevention there is a default Global Exception that ties these shared policies to all rules.

Global Exceptions

Re: I cannot delete gateway object

MACTEP — Wed, 31 Jul 2024 09:42:34 GMT

Delete first gateway's Policy. Manage policies and layers-> Policies
Publish.

Then Delete the gateway.

Re: I cannot delete gateway object

the_rock — Wed, 31 Jul 2024 12:54:59 GMT

Its not always black and white picture, as they say. Sometimes that does not work, there may be need to do some stuff in guidbedit as well.

Andy