Hi guys
I'm trying to import an R80.40 policy from security management into MDS also on R80.40. The export fails with no meaningful error message (see below). The export file is valid as i can successfully import it to a SMS. I've patched both source and destination to latest HFA. No joy
[Expert@CPR80dot40-MDS01:0]# mgmt_cli -d "System Data" migrate-import-domain domain-name NCC domain-server-name FWM-NCC domain-ip-address 10.0.2.106 file-pa
Username: admin
Password:
---------------------------------------------
Time: [14:55:08] 3/6/2021
---------------------------------------------
"Importing domain NCC" in progress (10%)
---------------------------------------------
Time: [14:55:19] 3/6/2021
---------------------------------------------
"Importing domain NCC" in progress (10%)
---------------------------------------------
Time: [14:55:29] 3/6/2021
---------------------------------------------
"Importing domain NCC" in progress (10%)
---------------------------------------------
Time: [14:55:39] 3/6/2021
---------------------------------------------
"Importing domain NCC" failed (100%)
tasks:
- uid: "08ff97b0-9711-45e3-9ce7-e5a41497def2"
type: "task"
domain:
uid: "a0eebc99-afed-4ef8-bb6d-fedfedfedfed"
name: "System Data"
domain-type: "mds"
task-id: "08ff97b0-9711-45e3-9ce7-e5a41497def2"
task-name: "Importing domain NCC"
status: "failed"
progress-percentage: 100
start-time:
posix: 1622728508450
iso-8601: "2021-06-03T14:55+0100"
last-update-time:
posix: 1622728531822
iso-8601: "2021-06-03T14:55+0100"
suppressed: false
task-details:
- uid: "7de16cf3-afea-421e-a373-787dd446e565"
name: null
domain:
uid: "a0eebc99-afed-4ef8-bb6d-fedfedfedfed"
name: "System Data"
domain-type: "mds"
statusCode: "failed"
statusDescription: "Succeeded"
taskNotification: "08ff97b0-9711-45e3-9ce7-e5a41497def2"
meta-info:
validation-state: "ok"
last-modify-time:
posix: 1622728531731
iso-8601: "2021-06-03T14:55+0100"
last-modifier: "System"
creation-time:
posix: 1622728531731
iso-8601: "2021-06-03T14:55+0100"
creator: "System"
tags: []
icon: null
comments: null
customFields: null
comments: "Failed: null"
color: "black"
icon: "General/globalsNa"
tags: []
meta-info:
lock: "unlocked"
validation-state: "ok"
last-modify-time:
posix: 1622728531841
iso-8601: "2021-06-03T14:55+0100"
last-modifier: "System"
creation-time:
posix: 1622728508462
iso-8601: "2021-06-03T14:55+0100"
creator: "System"
read-only: false
In CPM.ELG i can see the following error:
03/06/21 16:49:30,629 INFO upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: Starting domain migration NCC - (id:79ae2006-ba8a-4d3d-892b-4d52ac2916aa)
03/06/21 16:49:30,629 INFO upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: setCPDiagStartData -setting cpdiag start migrate import data
03/06/21 16:49:30,629 INFO upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: Set domain 79ae2006-ba8a-4d3d-892b-4d52ac2916aa upgrade mode
03/06/21 16:49:30,629 INFO upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: Checking Ips or APPI update running
03/06/21 16:49:30,635 INFO upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: Tasks list returned not empty with size of : 1
03/06/21 16:49:30,635 INFO upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: No update tasks are in progress, proceeding with import
03/06/21 16:49:30,745 INFO upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: createStartImportDomainAuditLog - creating start migrate import for domain - 79ae2006-ba8a-4d3d-892b-4d52ac2916aa
03/06/21 16:49:30,752 INFO corebl.internal.GetTaskNotificationCodeQueryHandler [taskExecutor-7]: GetTaskNotificationCodeQueryHandler.doQuery(GetAllTaskNotificationsByStatus) started
03/06/21 16:49:30,759 INFO corebl.internal.GetTaskNotificationCodeQueryHandler [taskExecutor-7]: GetTaskNotificationCodeQueryHandler.doQuery(GetAllTaskNotificationsByStatus) finished
03/06/21 16:49:30,761 WARN upgrade.common.LinksToIpsFromUserDomainExtraData [taskExecutor-16]: File /home/admin/temp-export/extra_data/LinksToIpsFromUserDomainExtraData.data does not exist
03/06/21 16:49:30,766 WARN upgrade.common.ObjectsInLocalDomainExtraData [taskExecutor-16]: File /home/admin/temp-export/extra_data/ObjectsInLocalDomain.data does not exist
03/06/21 16:49:30,767 ERROR upgrade.common.DomainMigrateSvcImpl [taskExecutor-16]: Failed to import ObjectsInLocalDomain extra data
03/06/21 16:49:30,767 ERROR upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: Domain migration failed for domain NCC - (id:79ae2006-ba8a-4d3d-892b-4d52ac2916aa)
java.lang.NullPointerException
at com.checkpoint.management.upgrade.ngmImport.ImportDomainToMdsTask.getExtraData(ImportDomainToMdsTask.java:173)
at com.checkpoint.management.upgrade.ngmImport.ImportDomainToMdsTask.preMigrateActions(ImportDomainToMdsTask.java:132)
at com.checkpoint.management.upgrade.ngmImport.MigrateImportDomainTask.doMigrateImport(MigrateImportDomainTask.java:453)
at com.checkpoint.management.upgrade.ngmImport.MigrateImportDomainTask.runTask(MigrateImportDomainTask.java:187)
at com.checkpoint.management.upgrade.common.impl.VersionIndependentUnattendedTask.run(VersionIndependentUnattendedTask.java:35)
at com.checkpoint.management.coresvc.CPRunnable.run(CPRunnable.java:8)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.lang.Thread.run(Thread.java:820)
03/06/21 16:49:30,767 INFO upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: Calling domain recovery for domain NCC
03/06/21 16:49:30,767 INFO upgrade.ngmImport.MigrateImportDomainTask [taskExecutor-16]: going to delete domain NCC on mds CPR80dot40-MDS01
Any thoughts ?
Thanks
