Failed to save object --> Wrong number of values for field 'Diffie Hellman Groups'

[Teddy_Brewski]

Hello,

A cluster of two 9100 appliances running R82 Take 60 recently upgraded from R81.20 (not sure it's important because I've experienced the same issue with 81.20 too).

When we try to modify any settings for certain Interoperable Devices (for example, changing the IP or Description), there is an error thrown:

Failed to save object FW-XXX. Validation error in field 'VPN' at object 'FW-XXX' at 'network_objects' --> Validation error in field 'IKE' at object 'FW-XXX' --> Wrong number of values for field 'Diffie Hellman Groups' --> The value '0' is not in the list of valid values '1~int_max'.

I can create a new Interoperable Device and edit it afterwards without any issues, this error only occurs for some old objects (inherited from R71 era).

I couldn't find anything missing via GuiDBedit for that particular object. Tried to compare it with the newly created object and they look the same.

Any hints would be appreciated.

Thank you.

[Lesley · Accepted solution]

have you seen https://support.checkpoint.com/results/sk/sk182598 ? 

[Teddy_Brewski]

Sorry for the noise -- that was it! 🙂

[PhoneBoy]

I would adjust the DH Group setting (adjusting it temporarily, saving, then change back to original setting) to see if the error clears.
Otherwise, you might need TAC to assist in clearing this.