Technical Tip: 'Capture-packet cannot be enabled without storage disk' error

[calink]

Description	This article explains how to resolve the 'Capture-packet cannot be enabled without storage disk' error when attempting to modify a policy.
Scope	FortiGate.
Solution	While attempting to modify a policy, the following error is seen: Capture packet cannot be enabled without storage disk Attempting to modify the policy using the CLI, the same error is displayed. Upon reviewing the policy, it will show that the set capture-packet enable is enabled on the policy: config firewall policy     edit <policy ID>         set capture-packet enable         set auto-asic-offload disable end This command is used to log and capture the first few packets of a session that matches this policy. Only the first packets of a new session are captured, not the entire session. The capture-packet setting can cause the above error and prevent modifications to the policy. Disable capture-packet on the necessary policy and save it. config firewall policy     edit <policy ID>         set capture-packet disable end Attempt to modify the policy again. To confirm if other policies have this setting, run the following commands: show full-configuration | grep -f "capture-packet enable" That output from this command will display policies that have this setting enabled so the setting can be removed from the policies if desired.