When pushing a policy package from the FortiManager we sometimes see the error:
Compiling policy(seq 4, id 3) fail: The category is already set in another filter.
and the push will fail. I get that this error has to do with the web filter most likely but it is not descriptive enough since it doesn't tell me the category or the filter it thinks it is conflicting with.
Are there are good tricks or work arounds to troubleshoot what is happening when this error occurs?
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
pls first find this policy (seq 4, id 3) used webfilter profile and then print db config by "exec fmpolicy print-adom-object", CLI has help by ? and then check if CLI config is OK
Thanks
Simon
Simon, thanks for the info. The output from the command is copied below. The only really odd this that jump out at me is at the bottom:
edit 72 set action block next
There is no category like the rest of the items.
FMG-VM64 # exec fmpolicy print-adom-object EDN "webfilter profile" "Web Content Filter" Dump object [Web Content Filter] of category [webfilter profile] in adom [EDN]: --------------- config webfilter profile edit "Web Content Filter" set comment "" config web set urlfilter-table "2" end config ftgd-wf unset options set category-override "g01" "g02" "g04" "g05" "g06" "g07" "g21" "140" "141" config filters edit 1 set category "140" set action block next edit 2 set category "141" set action block next edit 3 set category "1" set action block next edit 4 set category "3" set action block next edit 5 set category "4" set action block next edit 6 set category "5" set action block next edit 7 set category "6" set action block next edit 8 set category "12" set action block next edit 9 set category "59" set action block next edit 10 set category "62" set action block next edit 11 set category "83" set action block next edit 12 set category "2" set action block next edit 13 set category "7" set action block next edit 14 set category "8" set action block next edit 15 set category "9" set action block next edit 16 set category "11" set action block next edit 17 set category "13" set action block next edit 18 set category "14" set action block next edit 19 set category "15" set action block next edit 20 set category "16" set action block next edit 21 set category "57" set action block next edit 22 set category "63" set action block next edit 23 set category "64" set action block next edit 24 set category "65" set action block next edit 25 set category "66" set action block next edit 26 set category "67" set action block next edit 27 set category "19" set action block next edit 28 set category "24" set action block next edit 29 set category "25" set action block next edit 30 set category "72" set action block next edit 31 set category "75" set action block next edit 32 set category "76" set action block next edit 33 set category "26" set action block next edit 34 set category "61" set action block next edit 35 set category "86" set action block next edit 36 set category "17" set action block next edit 37 set category "18" set action block next edit 38 set category "20" set action block next edit 40 set category "28" set action block next edit 41 set category "29" set action block next edit 43 set category "33" set action block next edit 44 set category "34" set action block next edit 45 set category "35" set action block next edit 46 set category "36" set action block next edit 47 set category "37" set action block next edit 48 set category "38" set action block next edit 49 set category "39" set action block next edit 50 set category "40" set action block next edit 51 set category "42" set action block next edit 52 set category "44" set action block next edit 53 set category "46" set action block next edit 54 set category "47" set action block next edit 55 set category "48" set action block next edit 56 set category "54" set action block next edit 57 set category "55" set action block next edit 58 set category "58" set action block next edit 59 set category "68" set action block next edit 60 set category "69" set action block next edit 61 set category "70" set action block next edit 62 set category "71" set action block next edit 63 set category "77" set action block next edit 64 set category "78" set action block next edit 65 set category "80" set action block next edit 66 set category "82" set action block next edit 67 set category "85" set action block next edit 68 set category "87" set action block next edit 70 set category "43" set action block next edit 71 set category "53" set action block next edit 72 set action block next edit 73 set category "56" set action block next end
end next
end
what is the FMG version and FGT version / model?
edit 72 set action block next
-- this is for unrated and config is OK
Thanks
Simon
Manager is 5.2.0 and the device is running 5.2.1.
I found a similar issue reported in FMG 5.2.0 and we have removed this check from FMG 5.2.1
Thanks
Simon
Thanks for the information. Ill check out upgrading.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1714 | |
1093 | |
752 | |
447 | |
232 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.