Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Contributor

Object default icmp-proto not found

Hi, everyone, After migrating an MDS from 77.30 to 80.10 we identified that an icmp-proto object could not be located, but when we try to create an object with that name, I get the information that the object already exists. When opening dbEdit I locate the object and I can change it but when I save I receive the message that the object was not found. I tried to find the same object in other CMA's and it did not succeed either. Has anyone had the same problem?

13 Replies
Highlighted
Champion
Champion

It's still there:

0 Kudos
Highlighted
Contributor

Not in my case:

0 Kudos
Highlighted
Champion
Champion

Compare the screenshots. You searched for Services, I searched for All.

0 Kudos
Highlighted
Contributor

anyway not show

0 Kudos
Highlighted

I'd suggest to log a ticket at Checkpoint TAC. 

and now to something completely different
Highlighted
Authority
Authority

Not too sure if it helps. Mine work fine in all CMAs.  But you might want to compare all properties if you see object with dbedit

dbedit> print services icmp-proto

Object Name: icmp-proto
Object UID: {97AEB405-9AEA-11D5-BD16-0090272CCB30}
Class Name: other_service
Table Name: services
Last Modified by: System
Last Modified from: localhost
Last Modification time: Fri Mar 17 10:28:22 2017
Fields Details
--------------
action_exp:
aggressive_aging_timeout: 15
color: dark orchid
comments: Internet Control Message Protocol
default_aggressive_aging_timeout: 0
enable_aggressive_aging: true
etm_enabled: true
has_detect: false
include_in_any: true
is_default_aggressive_timeout: true
match_exp:
needruleinfo: false
no_mapping_for_exp: false
port:
prohibit_aggressive_aging: false
proto_type: NULL
protocol: 1
protocol_uuid:
reload_proof: false
replies: false
service_port_type: customize
sync_on_cluster: true
timeout: 60
type: other
unsupported_compatibility_packages:
updated_by_sd: false
use_default_session_timeout: true
weight: 0

and from API call

> show service-other name "icmp-proto" details-level full

uid: "97aeb405-9aea-11d5-bd16-0090272ccb30"
name: "icmp-proto"
type: "service-other"
domain:
uid: "a0bbbc99-adef-4ef8-bb6d-defdefdefdef"
name: "Check Point Data"
domain-type: "data domain"
ip-protocol: 1
accept-replies: false
override-default-settings: false
session-timeout: 60
use-default-session-timeout: true
match-for-any: true
sync-connections-on-cluster: true
aggressive-aging:
enable: true
timeout: 15
use-default-timeout: true
default-timeout: 0
keep-connections-open-after-policy-installation: false
groups:
- uid: "f8568c62-b8aa-4d90-9ec6-534eaa1b71db"
name: "Restrict_Common_Protocols_Action"
type: ""
domain:
uid: "7e1db45a-8f27-4358-bf5b-65b13e15764f"
name: "blablabla"
domain-type: "domain"
color: "black"
meta-info:
validation-state: "ok"
last-modify-time:
posix: 1517837041917
iso-8601: "2018-02-05T14:24+0100"
last-modifier: "System"
creation-time:
posix: 1517837041917
iso-8601: "2018-02-05T14:24+0100"
creator: "System"
tags: []
icon: "Unknown"
comments: "Restrict to common protocols and Trusted Zone"
display-name: ""
customFields: null
comments: "Internet Control Message Protocol"
color: "orchid"
icon: "Services/OtherService"
tags: []
meta-info:
lock: "unlocked"
validation-state: "ok"
last-modify-time:
posix: 1489742902848
iso-8601: "2017-03-17T10:28+0100"
last-modifier: "System"
creation-time:
posix: 1489742902848
iso-8601: "2017-03-17T10:28+0100"
creator: "System"
read-only: false

0 Kudos
Highlighted
Contributor

Hi, Kaspars Zibarts‌  in your case was upgraded from 77.30 to 80.10?

0 Kudos
Highlighted
Authority
Authority

Actually no. 77.30 to 80 originally. Then 80.10. but we had some object conflicts that we were able to resolve with dbedit. 

Highlighted
Contributor

> show service-other name "icmp-proto" details-level full

code: "generic_err_object_not_found"
message: "Requested object [icmp-proto] not found"

0 Kudos
Highlighted
Authority
Authority

what about dbedit?

0 Kudos
Highlighted
Contributor

In the dbedit are exactly same ...

0 Kudos
Highlighted
Contributor

Object Name: icmp-proto
Object UID: {97AEB405-9AEA-11D5-BD16-0090272CCB30}
Class Name: other_service
Table Name: services
Last Modified by: System
Last Modified from: localhost
Last Modification time: Sat May 26 17:14:18 2018
Fields Details
--------------
action_exp:
aggressive_aging_timeout: 15
color: dark orchid
comments: Internet Control Message Protocol
default_aggressive_aging_timeout: 0
enable_aggressive_aging: true
etm_enabled: true
has_detect: false
include_in_any: true
is_default_aggressive_timeout: true
match_exp:
needruleinfo: false
no_mapping_for_exp: false
port:
prohibit_aggressive_aging: false
proto_type: NULL
protocol: 1
protocol_uuid:
reload_proof: false
replies: false
service_port_type: customize
sync_on_cluster: true
timeout: 60
type: other
unsupported_compatibility_packages:
updated_by_sd: false
use_default_session_timeout: true
weight: 0

0 Kudos
Highlighted

Indeed, please open a support ticket. The service should be there.