- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Used the GitHub ExportImport script (https://github.com/CheckPointSW/ExportImportPolicyPackage) to export an R80.20 package successfully from a CMA on a lab MDS server. (Unassigned the global policy first.)
However I keep getting error(s) when trying to import it to a different CMA on the same MDS server - Error: message: Runtime error: Operation is not allowed in read only mode!
The user is created with the built-in Multi-Domain Super User profile.
Any ideas?
Command
-------------
python ExportImportPolicyPackage-master/import_export_package.py -op import -n test_policy -f /home/admin/test_policy.tar.gz --all -u api -p xxxxxx -d 10.10.10.100 -m 10.10.10.10
Error
----------
Creating a Policy Package named [test_export_policy]
Importing general objects
Adding generic objects of type com.checkpoint.objects.classes.dummy.CpmiGatewayCluster
Failed to import com.checkpoint.objects.classes.dummy.CpmiGatewayCluster with name [export_error_CpmiGatewayCluster_31194273-8981-4e12-8803-bcbfc95bd8bb_test]. Error: message: Runtime error: Operation is not allowed in read only mode!
code: generic_error
Adding services-udp
Failed to import service-udp with name [UDP_135]. Error: message: Runtime error: Operation is not allowed in read only mode!
code: generic_error
<multiple lines with same error>
My guess is that you are either connecting to the wrong domain (your management IP and domain are different, which is fine, but the domain is most relevant) or the user is, in fact, read-only.
Against the relevant CMA, just do something simple like: mgmt_cli login domain 10.10.10.100 with the relevant credentials and see what is returned.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY