Checkpoint: unable to update firewall object in Smartconsole "Gateways & Server" tab: Code: 0x800300

[win2kshahid]

This is Check Point cpinfo NG Build 996001258 for Gaia Embedded

Remote Session Summary:

 

Summary:

The client is not able to edit firewall object in Smart console. they are getting error message: "Gateways & Server" tab: Code: 0x8003001D) Could not access file for write operation"

 

Environment:

MDS - R82 take 39

Quantum Security Gateways - R81.10.10

 

Steps Taken:

- Executed https://support.checkpoint.com/results/sk/sk182598

- Reopened the Smart console and tried to edit the firewall object > got same error

- Checked CPM doctor > checked if firewall object has duplicate interfaces configured > there are duplicate interfaces

- Recommended the client to upgrade the Quantum Spark GWs to R81.10.15 version and see if it resolves the issue did not work.

- Took snapshot of the MDS server so that we can revert back if any configuration change goes wrong

- Checked the topology and the subnet mask for cluster VIP was wrong > it was supposed to be 255.255.255.248, not 255.255.255.240

- Tried to delete the interface and create it again > got the same error

- Ran "deleteLockedobjects.sh" script and ran command "$MDS_FWDIR/scripts/reload_env_ver.sh -e "RESET_LOCKS...

- Checked sk166013, sk151092,sk182903 > these SK documents did not resolved the issue

- Referred to internal development tasks - TM-88477, TM79029 > buit the solution did not worked

Does anyone have a clue how to fix this issue ?

[_Val_]

It appears that you are copying details of your TAC case communications. 

I would recommend continuing the support process, since you started it already. Please let us know when and how it is resolved, afterwards.

[win2kshahid]

Hi, it is not going anywhere since 3 weeks back and wanting to get  some other ideas/solutions on checkmates.

[_Val_]

Please send me your SR number via a personal message.

[Tal_Paz-Fridman]

This can sometimes happen when communication between SmartConsole and the Security Management Server is interrupted momentarily. Have you tried to logout and login again with SmartConsole or even running cpstop and cpstart on the Management? 

[win2kshahid]

i will ask someone to test this solution @Tal_Paz-Fridman 

[win2kshahid]

Hi it did not work.

[the_rock]

Hey @win2kshahid Did you figure this out?

Best,

Andy

[win2kshahid]

No not yet.

[Lesley]

What you see in $FWDIR/log/cpm.elg  when you edit the gw?

[win2kshahid]

will ask someone to check it today.

[win2kshahid]

13/10/25 09:11:57,387 WARN cdm.validations.UniqueNameByGwOwnerValidationImpl [qtp-1251000694-74621]: Duplication found: name [LANBOND0.143], class [GatewayNetwork], owner [4247c4d2-ade1-47db-baec-080994ff3c94], objid [a63519e5-de92-4916-a536-adabb6691c64]
13/10/25 09:11:57,388 WARN coresvc.internal.ValidationsSvcImpl [qtp-1251000694-74621]: Validation UniqueNameByGwOwnerValidation has no validationtype defined
13/10/25 09:11:57,388 ERROR coresvc.internal.ValidationsSvcImpl [qtp-1251000694-74621]: severity of validation error [ValidationIncident{incidentType='OBJECT'{validationDisplayName='Unknown'{blade='null'{validationName='UniqueNameByGwOwnerValidation', severity=BLOCKING_ERROR, message='Name already used', validationContext=[FieldValidationContext{validatedObjId='a63519e5-de92-4916-a536-adabb6691c64'{fieldName='null'}]}] is above the allowed level WARNING. Update is aborted!
13/10/25 09:11:57,388 WARN coresvc.internal.ObjectStoreJpaTransactionManager [qtp-1251000694-74621]: rolling back the transaction. stack trace:

[_Val_]

@win2kshahid, Did you or your support partner try implementing the procedure as advised by TAC through your case?

[win2kshahid]

yes most of them. None of them worked until now.

[Lesley · Accepted solution]

Looks like something is going on with bond0.143 

Anything changed related to this, can be found in audit logs. Or look for duplication of the object. 

[win2kshahid]

Apparently the subnet mask was wrong in the fw object.
It is fixed and now everything is working. I guess will give it to Lesley accepted as a Solution 😉

[the_rock]

Great job!

[_Val_]

Wow, @Lesley, well spotted!

@win2kshahid I am very happy the issue is now resolved.

[the_rock]

I had similar happen in harmony sase...subnet mask is important 🙂

Andy