Troubleshooting Tip: Unable to create local-in-policy - 'node_check_object fail!'

[Dhruvin_patel]

Description	This article describes the reason for the error 'node_check_object fail!' when creating local-in-policy in FortiOS version 7.4.6 and version 7.6.1.
Scope	FortiOS v7.4.6, v7.6.1.
Solution	config firewall local-in-policy Hub (local-in-policy) # edit 1 new entry '1' added Hub (1) # set intf port3 node_check_object fail! for name port3 value parse error before 'port3' Command fail. Return code -651 Hub (1) # set srcaddr all Hub (1) # set dstaddr all Hub (1) # set action accept Hub (1) # set service ALL Hub (1) # set schedule always Hub (1) # next Attribute 'intf' MUST be set. Command fail. Return code 1 It is because the interface port3 is being used to create local-in-policy is a member of the SD-WAN zone. The behavior has changed from the previous FortiOS version, it is now not possible to create a local-in-policy with individual SD-WAN members. In this case, port3 is an SD-WAN member.  To create a local-in-policy, use the SD-WAN zone instead.  config firewall local-in-policy     edit 1         set uuid xxxx         set intf "virtual-wan-link"         set srcaddr "all"         set dstaddr "all"         set action accept         set service "ALL"         set schedule "always"     next end Additionally, interfaces which are member of a ZONE [regular interface zones] cannot be referred individually in local-in-policy. Use ZONE as reference in local-in-policy. Related document: Policies that use an interface show missing or empty values after an upgrade - FortiOS 7.6.1 known i.... If a local-in-policy, DoS policy, interface policy, multicast policy, TTL policy, or central SNAT map uses an interface in version 7.4.5, 7.6.0 GA, or any previous GA version that was part of the SD-WAN zone, these policies will be deleted or show empty values after upgrading to version 7.4.6 or 7.6.1. After upgrading to version 7.4.6 or 7.6.1 GA, users must manually recreate these policies and assign them to the appropriate SD-WAN zone.