Troubleshooting Tip: Delete Firewall central-snap-map Interface Reference From FortiManager

Description

This article describes steps that can be taken to remove an interface being referred to in central-snap-map but unable to be seen in the FortiManager GUI.

Scope

FortiManager.

Solution

When deleting an interface, it is required to remove all of the references. Otherwise, the steps are blocked

In this case, the interface is being referred to in the central-snap-map configuration, which belongs to a policy.

When checking the referencing by 'right-clicking' the interface, 'Where Used', Interface1 is being used in a policy called 'Policy-1'.

When selecting 'View' to view where the interface is being used, the page is redirected to the policy package page but the interface is unable to be seen.

When selecting 'Edit', the page becomes blank because it cannot redirect to the page.

To resolve this, 'right-click' the policy that the interface is referring to, then select 'Edit'. Check the 'Central NAT' option and ensure that it is enabled.

Once enabled, select OK to save the changes. Then, in the policy package tree, there should be few new additions which are Central SNAT, Central DNAT, and IPv6 Central DNAT.

In the 'Where Used' page, the details mentioned that the object is being referred to in firewall central-snap-map, which means, the policy should be in the Central SNAT.

Going into Central SNAT, the interface can be seen in use. While the option was disabled, the reference remained and since the page is unavailable, FortiManager was unable to redirect to the required page when selecting the 'Edit' from 'Where Used' pop-up window.

Removing the reference, or deleting the whole policy, then reconfiguring the policy package to have the option 'Central NAT' to disable will help solve the issue.

Once done, the interface can be deleted without any issue as there are no references left.