Failed import configuration to FortiManager

[Jirka1]

Hello,

I am starting to learn with FortiManager and when initially importing an existing FortiGate I get the following error:

Retriving configuration file from FGT...
Configuration file import succeeded.
Reloading configuration file...
Error: Configuration reload error.
---------------------------------
Failure info:
SELECT "##oid" FROM objcfg_fw_sched_onetime WHERE "##parent"=3 AND ("name"=? OR "name"=?);
no such table: objcfg_fw_sched_group
SELECT "##oid" FROM objcfg_fw_sched_group WHERE "##parent"=3 AND ("name"=? OR "name"=?);
no such table: objcfg_fw_sched_onetime
SELECT "##oid" FROM objcfg_fw_sched_onetime WHERE "##parent"=3 AND ("name"=? OR "name"=?);
no such table: objcfg_fw_sched_group
SELECT "##oid" FROM objcfg_fw_sched_group WHERE "##parent"=3 AND ("name"=? OR "name"=?);
no such table: objcfg_fw_sched_onetime
SELECT "##oid" FROM objcfg_fw_sched_onetime WHERE "##parent"=3 AND ("name"=? OR "name"=?);
>command(set firewall local-in-policy.1:intf SD-WAN-Inet) detail(datasrc invalid. object: firewall local-in-policy intf 1. detail: SD-WAN-Inet. solution: data not exist)> add reference fail: command(set firewall local-in-policy.1:intf SD-WAN-Inet) detail(datasrc invalid. object: firewall local-in-policy intf 1. detail: SD-WAN-Inet. solution: data not exist)cdb_parse_file: runtime error 131: datasrc invalid. object: firewall local-in-policy.1:intf. detail: SD-WAN-Inet. solution: data not exist
---------------------------------

It seems that the problem is caused by two rules in the local-in Policy that I have as geo-ip for IPsec tunnels:

config firewall local-in-policy
    edit 1
        set intf "SD-WAN-Inet"
        set srcaddr "ipsec-geo-vpn"
        set dstaddr "all"
        set action accept
        set service "IKE" "ESP"
        set schedule "always"
    next
    edit 2
        set intf "SD-WAN-Inet"
        set srcaddr "all"
        set dstaddr "all"
        set service "IKE" "ESP"
        set schedule "always"
    next
end

How to get out of this?

Thank you.

Jirka

[longnguyen]

Hi Jirka,

Please help me how to display the Logs like yours above, I am also having the same situation as you but when Show Firewall Local there is no configuration so I cannot Delete.

[longnguyen]

Hi everyone,

I am having the same problem as this when adding FGT to FMG but the error message output does not have the above information. I only get Failed message when I get to Retrive IPS signature step and when I check in Task Monitor, I get "Failed to reload configuration. 'invalid value".
Can you guys please help me?

P/s: FMG 7.6.2 and FGT 7.4.7