mgmt_cli Runtime Error with "set access-rule"

[IdentityUnknown]

Hi guys,

any ideas to this error, running againt R80.30 DMS (Api version 1.5).

# mgmt_cli set access-rule name "Cleanup" layer "Network" track.type "Log"

code: "generic_error"
message: "Runtime error: com.checkpoint.management.access.objects.access_rulebase.AccessCtrlSection incompatible with com.checkpoint.objects.rulebase.RulebaseRule"

[PhoneBoy]

See if this thread helps you: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Web-API-setting-track-level/m-p/6...

[IdentityUnknown]

Unfortunately not.

Everything is working as expected with the command "add access-rule", but I have to use "set access-rule" to modify an existing rule to log, which is by the way the default cleanup rule.

I am not allowed to create a policy package without a default cleanup rule.

[PhoneBoy]

It worked for me after I renamed the Cleanup rule something other than Cleanup.

> set access-rule name "Cleanup" layer "Network" track.type "log"

code: "generic_err_object_field_not_unique"
message: "Requested object name [Cleanup] is not unique."


> set access-rule name "Cleanup_Rule" layer "Network" track.type "log"