topic Re: python ExportImportPolicyPackage errors - cluster in API / CLI Discussion

python ExportImportPolicyPackage errors - cluster

Luis_Miguel_Mig — Thu, 29 Jun 2023 11:39:34 GMT

ExportImportPolicyPackage latest v5.8.4

Firewall Managers r80.40 take197

I am trying to export/import policy packages (installed in firewall clusters) between two firewall managers and I get mainly two errors:

1) Objects with hide nat installed in specific clusters: It seems that objects are not imported because the export operation fails to export the cluster object

Import logs import_error_log.elg

Failed to import host with name [object name]. Error: code: generic_err_object_not_found
message: Requested object [partial_export_error_simple-cluster_1b8fe9ac-96a3-4704-88cc-2d02a745f55b_clustername] not found

Export log import_error_log.elg

Object of type simple-cluster with uid 1b8fe9ac-96a3-4704-88cc-2d02a745f55b named clustername is only partially exportable. Its name was changed to partial_export_error_simple-cluster_1b8fe9ac-96a3-4704-88cc-2d02a745f55b_clustername

2) Nats rules: only nats (both manual and automatic) not installed in specific clusters (install on set to All) are imported properly. Nats installed in specific clusters are not imported

Import logs import_error_log.elg

Failed to import nat-rule. Error: code: generic_err_object_not_found
message: Requested object [partial_export_error_simple-cluster_1b8fe9ac-96a3-4704-88cc-2d02a745f55b_clustername] not found

Is there anything I can do to resolve these errors? As far as understand, clusterXL firewalls are supported since v5.8 so I don't know why I am getting these errors.

Re: python ExportImportPolicyPackage errors - cluster

Tal_Paz-Fridman — Thu, 29 Jun 2023 11:47:26 GMT

I've talked to R&D owner and he suggested opening a ticket with TAC.

Thank you.

Re: python ExportImportPolicyPackage errors - cluster

SajinVV — Fri, 26 Jan 2024 10:21:08 GMT

Hi Luis,

Is this issue resolved and can you give a brief description.

Thank You.

Re: python ExportImportPolicyPackage errors - cluster

Luis_Miguel_Mig — Fri, 26 Jan 2024 13:56:51 GMT

No, the issue has not been resolved. You can workaround it by removing all the nat bindings to cluster or fw objects before the export.

Re: python ExportImportPolicyPackage errors - cluster

SajinVV — Mon, 24 Jun 2024 08:43:12 GMT

The issue is resolved when changing the Firewall or Cluster object to Policy Targets.