FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
jasonhong
Staff
Staff
Article Id 380713
Description

This article describes how to troubleshoot the Global Policy Assignment Error in FortiManager.

Scope FortiManager.
Solution
  1. By default, only an ADOM can be assigned to a single global policy package at a time. For this demonstration, a user is attempting to assign the global policy package named 'default' to ADOM 'adom_1' but gets prompted with an error.

 

doubleglobalassignment.gif

 

  1. Further investigation has found that adom_1 is already assigned to the 'global_policypackage' global policy package which explains why adom_1 cannot be assigned to another global policy package.

 

assignedadom1.png

 

  1. Hence, the user needs to remove adom_1 from being assigned to the existing 'global_policypackage' global policy package before re-assigning it to the 'default' global policy package.

 

removeglobalassignment.gif

 

  1. Below CLI command below can also be used to check for any invalid global policy package assignment:

 

FMG# diagnose cdb upgrade check invalid-global-assignment