Skip to main content
sw2090
SuperUser
sw2090
SuperUser
October 29, 2025
Solved

Issue with proivisioning Template in FMG

  • October 29, 2025
  • 1 reply
  • 464 views

I just ran into this:

 

I have an Adom in FMG. In this is a FGT100F I want to use for lab purposes. It was reseted to factory default before adding it to FMG. It added successfully and I can configure it in FMG. I was able to deploy device configuration to it successfully.

I then created a provisioning system template that assigns system dns, ntp etc. The template also does the interface config (creating vlan interfaces and afterwards configuring them). For the interface configuration one variable out of the policy package is used.

Once I assign that FGT100F to that template and try to deploy device config only it fails. There is no installation log available and the progress log only says "[fw-teststandort1[copy] root] Copy global shared objects failed (adom:my_Adom, dev:fw-teststandort1) (reason:none)". It does not provide any further information. Also dia deb app securityconsole 255 does not provide any more information.

 

Does anyone have a hint on how to further debug this to find the culprit?

The only non devdb object used is that variable and its only used in interface configs. The variable in policy package does have a valid per-device-mapping for this FGT100F.

 

Best answer by sw2090

Update: I found the culprit now. The template did deploy when the interface section was disabled. So the culprit had to be in there and accoarding to the given error message it could only be that variable. I then used the "Post Action View" button to get a post action view for this particular FGT and this showed my that there were some copy-paste-failures on the variable somewhere (It however did not show me where but I did find them though).

After correcting these it worked.  

Why cannot that be shown in the provided Logs and Cli debugs? 

 

1 reply

sw2090
SuperUser
sw2090AuthorAnswer
SuperUser
October 29, 2025

Update: I found the culprit now. The template did deploy when the interface section was disabled. So the culprit had to be in there and accoarding to the given error message it could only be that variable. I then used the "Post Action View" button to get a post action view for this particular FGT and this showed my that there were some copy-paste-failures on the variable somewhere (It however did not show me where but I did find them though).

After correcting these it worked.  

Why cannot that be shown in the provided Logs and Cli debugs? 

 

    Terms & ConditionsAccessibility statement