topic Re: how to newly add objects to install-on in bulk/batch using mgmt_cli? in General Topics

how to newly add objects to install-on in bulk/batch using mgmt_cli?

saitoh — Thu, 16 Apr 2026 14:10:19 GMT

Hi experts,

R82 vm management server with JHF Take 60

I would like to know the easiest method to add newly added gateway object to Install On of more than 1000 rules of access control policy.

Adding them to each rule in front of our customers is nightmare 😞

What I tried is:

1. create csv file which looks like

command,layer,position,install-on.add

set access-rule,testpolicy.1.newly_added_gateway

set access-rule,testpolicy.2.newly_added_gateway ... and so on.

2. import, and move it to /home/admin/

3. mgmt_cli login

#mgmt_cli login -u admin -p > id.txt

pass password prompt

4. try mgmt_cli set access-rule --batch

but it says:

# mgmt_cli set access-rule --batch /home/admin/installon_add.csv -s id.txtLine 2: code: "generic_err_invalid_parameter_name"message: "Unrecognized parameter [command]"Line 3: code: "generic_err_invalid_parameter_name"message: "Unrecognized parameter [command]"

...

also tried mgmt_cli --batch, but

# mgmt_cli --batch /home/admin/installon_add.csv -s id.txt

Error: No command name was specified!

No idea what to try next.

Any comments would be highly appreciated!

Saitoh

Re: how to newly add objects to install-on in bulk/batch using mgmt_cli?

Vincent_Bacher — Thu, 16 Apr 2026 14:28:30 GMT

Usually i would use a python script for that but if you want to create a csv, i guess the file should look like this:

layer,rule-number,install-on.add testpolicy,1,newly_added_gateway testpolicy,2,newly_added_gateway testpolicy,3,newly_added_gateway

and then something like that:

mgmt_cli -r true set access-rule --batch /path/file.csv

or so. Hope i have it in mind correctly

Re: how to newly add objects to install-on in bulk/batch using mgmt_cli?

Tomer_Noy — Thu, 16 Apr 2026 14:48:33 GMT

Technically, there are multiple ways to script what you are trying to do.

But, I would consider looking at the way you manage your target gateways and the Install On column. It's possible that with some changes, you can greatly simplify things and avoid having to do all this work every time you add another gateway.

In general, every policy package has a definition for the potential installation targets. By default it's set to "All Gateways", but you can (and usually should) set the specific gateways that should get this policy.

When editing your actual FW rulebase, there is no need to explicitly put your gateways in the Install On column. You can leave the default of "Policy Targets" and your rules will be applied to all gateways that are installed with this package.

There are of course legitimate cases for applying specific rules only to a subset of the gateways that get this policy. Usually this doesn't include all rules, but can still include a large number.
In such cases, it's advised to create a Network Object group and place the relevant gateways in that group. Then put that group in the Install On column. When you have another gateway that should get the same rules, just add that gateway to the group. Using groups keeps the entire policy more organized (also for Source and Destination columns).

Make sure to only place gateways in that group, otherwise it won't let you put that group in the Install On cell.

You might want to create a script to identify all the rules that currently reference the set of gateways and modify the Install On to reference the new group. This would be a one-time effort.

You can also use the "Where Used" dialog with the "Replace" option and choose one of the gateways and replace all references to it with the group. Just do it carefully since you may not want to accidentally replace references in other contexts.

You can double-check your changes before you publish with the Changes Report.

Re: how to newly add objects to install-on in bulk/batch using mgmt_cli?

Vincent_Bacher — Thu, 16 Apr 2026 14:59:07 GMT

I’d originally included ‘Install on’ in my post as well, but somehow I deleted a paragraph before sending it.

Head —> Table

Re: how to newly add objects to install-on in bulk/batch using mgmt_cli?

saitoh — Fri, 17 Apr 2026 00:39:36 GMT

Hi @Tomer_Noy ,

I cannot thank you enough, for much detailed, informative answer.

Actually "Replace" method in WhereUsed is a life saver!!!

That is the easiest way to achieve what I need to do. Much appreciated!

Saitoh