topic Re: add rule to policy via mgmt_Cli fails in General Topics

add rule to policy via mgmt_Cli fails

Roadrunner88 — Thu, 14 Aug 2025 05:46:34 GMT

Hi Guys,

by creating a rule via the mgmt_cli API, I am getting the follwoing error, which I cant solve:

com.checkpoint.management.policy_package.objects.policy_package.PolicyPackage incompatible with com.checkpoint.objects.rulebase.OrderedRulebase

I want to add a rule to an existing policy with this example command for testing:

mgmt_cli add access-rule layer "e6ba927f-xxx-xxx-xxxUID" position.bottom "My Access Section" name "Last rule in the section"

I get the return message above.

How can I solve this ?

Thanks!

Edit:

Management Server is R81.20 Take 631

Re: add rule to policy via mgmt_Cli fails

Tal_Paz-Fridman — Thu, 14 Aug 2025 07:09:26 GMT

I would open a ticket with Check Point TAC.

It seems a layer (or policy) might have been deleted and the session may not have been published. Could you check if you have any unsaved changes or other open sessions (Manage & Settings > Sessions > View Sessions)?

Re: add rule to policy via mgmt_Cli fails

Roadrunner88 — Thu, 14 Aug 2025 07:37:57 GMT

Hey,

indeed I had open "Old" sessions, which had non published changes (added network objects) and were disconnected
ive discarded these but it didnt solve the problem.

Re: add rule to policy via mgmt_Cli fails

Roadrunner88 — Thu, 14 Aug 2025 08:03:18 GMT

Edit: I think the problem is, that we have more than one Policy on the management Server, how can I choose, on which Policy the rule should be added?

Re: add rule to policy via mgmt_Cli fails

Roadrunner88 — Thu, 14 Aug 2025 08:35:20 GMT

the thread can be closed.

it was a misunderstanding from my side:

mgmt_cli add access-rule layer "" position.bottom

in the layer part, i didnt add the policy name like: layer "test Network"

so thanks for help anyway