topic Re: mgmt_cli Runtime Error with "set access-rule" in API / CLI Discussion

mgmt_cli Runtime Error with "set access-rule"

IdentityUnknown — Mon, 21 Oct 2019 08:34:33 GMT

Hi guys,

any ideas to this error, running againt R80.30 DMS (Api version 1.5).

# mgmt_cli set access-rule name "Cleanup" layer "Network" track.type "Log" code: "generic_error" message: "Runtime error: com.checkpoint.management.access.objects.access_rulebase.AccessCtrlSection incompatible with com.checkpoint.objects.rulebase.RulebaseRule"

Re: mgmt_cli Runtime Error with "set access-rule"

PhoneBoy — Mon, 21 Oct 2019 15:04:14 GMT

See if this thread helps you: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Web-API-setting-track-level/m-p/65090#M4026

Re: mgmt_cli Runtime Error with "set access-rule"

IdentityUnknown — Mon, 21 Oct 2019 15:20:18 GMT

Unfortunately not.

Everything is working as expected with the command "add access-rule", but I have to use "set access-rule" to modify an existing rule to log, which is by the way the default cleanup rule.

I am not allowed to create a policy package without a default cleanup rule.

Re: mgmt_cli Runtime Error with "set access-rule"

PhoneBoy — Thu, 24 Oct 2019 17:42:54 GMT

It worked for me after I renamed the Cleanup rule something other than Cleanup.

> set access-rule name "Cleanup" layer "Network" track.type "log"

code: "generic_err_object_field_not_unique"
message: "Requested object name [Cleanup] is not unique."

> set access-rule name "Cleanup_Rule" layer "Network" track.type "log"