topic Re: Failed to run policy installation wrapper on SMB 1570R in Spark Firewall (SMB)

Failed to run policy installation wrapper on SMB 1570R

Marco32 — Wed, 02 Nov 2022 15:57:16 GMT

Hello there,

I have a issue with 1570R R80.20.50 Centrally Managed fromMDS R81.10 last JHF.

When I try to execute the fetch policy from the management, I have these error:

fw-1> fetch policy mgmt-ipv4-address 10.10.10.10
Fetching policy from 10.10.10.10
Fetching Security Policy from '10.10.10.10'

Fetching Security Policy Succeeded.

Installing Security Policy...

Installing Security Policy Succeeded.
Done.

Error: Failed to run policy installation wrapper.
sfw_fetch_callback: Failed to execute command '"/opt/fw1/bin/fw" fetchlocal -d "/opt/fw1/state/__tmp/FW1"'. rc=1, exit code =-1
Unable to install the Security Policy on the appliance

The command "fetch certificate mgmt-ipv4-address 10.10.10.10" executed before the fetch policy works fine.

Can you help me to fix it?

Regards
M.

Re: Failed to run policy installation wrapper on SMB 1570R

_Val_ — Wed, 02 Nov 2022 16:22:13 GMT

Reboot, if still the issue, open a TAC request, please

Re: Failed to run policy installation wrapper on SMB 1570R

G_W_Albrecht — Wed, 02 Nov 2022 17:27:51 GMT

Is this a cosmetic error (policy really had been installed) or does it keep the former policy ? This error in sk117474 has the reason that wrong appliance / firmware is selected in Dashboard / SmartProvisioning.

Re: Failed to run policy installation wrapper on SMB 1570R

Marco32 — Wed, 02 Nov 2022 19:02:06 GMT

Hi there,

I don't think it can be a cosmetic issue because it doesn't install the policy. Version and appliance type are correct.

After few time I tryed to fetch the policy the Appiance fetch it correctly. But replicating the issue I can't fetch the policy.

There's something to test ? it's very strange behavior

Re: Failed to run policy installation wrapper on SMB 1570R

G_W_Albrecht — Thu, 03 Nov 2022 09:36:57 GMT

What happens if you install policy from Dashboard ? Best to contact TAC, they can resolve such issues quickly...

Re: Failed to run policy installation wrapper on SMB 1570R

PhoneBoy — Thu, 03 Nov 2022 13:11:03 GMT

Recommend engaging with the TAC for the proper troubleshooting steps here to capture why it (sometimes) fails.