Error: "SmartDashboard cannot be loaded since a rulebase was found without a matching policy collection object." when trying to open the SmartDashboard
Solution ID: #sk16476
Product: SmartCenter
Version: NG
Last Modified: 17-Dec-2004
Symptoms
* After moving the Rule Bases and objects files from one management console to another management console, the following error message is received when trying to open SmartDashboard: "SmartDashboard cannot be loaded since a rulebase was found without a matching policy collection object".
Solution
The relationship between policies and policies_collections is as follows:
- Each policy must point to a policies_collection
- There should be up to one policy of each type pointing to the same
policies_collection. NOTE: There can not be two security policies
pointing to the same policies_collection but there can be two policies, one
security and the other QoS, pointing to the same policies_collection).
- There should be exactly one policies_collection marked as the default
policies_collection
In general, there is no dependency between the name of the policies and the name of the policies_collection.
NOTE: The name of the policy collections (Policy Packages in SmartDashboard) and not the name of the policies is what is shown in SmartDashboard.
Download CP Database Tool according to the version of the Management.
for FP2:
http://www.checkpoint.com/techsuppor...dit_b52016.zip for FP3:
http://www.checkpoint.com/techsuppor...dit_ng_fp3.zip For NG with Application Intelligence R54 & R55:
http://www.checkpoint.com/techsuppor...dit_ng_r54.zip 1) Connect with GUI DbEdit to the management server and open the "Policies" branch in the left pane.
2) Under "Policies", choose 'fw_policies', the right pane will show all security policies.
3) Go through each policy. Select a policy, and verify that it has a policies_collection associated:
a) Select a policy
b) Look in the "Field Properties" pane at the bottom, the field "collection" must have a value.
c) Make a list of the policies that do not have a value in this field.
4) Choose 'policies_collection' under 'Policies' in the left pane.
5) Create a policies_collection for each policy in the list:
a)Go to the right pane, right click and choose 'New'.
b)Leave the class name as it is, and enter the name for the policies_collection in the "Object" field.
NOTE: Best Practice is to name the object with the name of the policy.
For example, the name of the policy is 'Standard', and appears in the Database Tool as "##Standard".
The policies_collection name should be 'Standard'.
6) Go back to the 'fw_policies' branch.
7) For each policy in the list, double click the 'collection' field. In the 'Edit Element' dialog, choose the proper policies_collection (this should have the same name as the policy).
8) If there are policies of other products , such as fg_policies for QoS, slp_policies for Desktop Security, repeat steps 4-7 for
them; Log Consolidator policies do not need this done.
9) In the 'policies_collection' branch, go through the policies_collection objects and verify that only one policies_collection object has the value '1' for the field 'default'. If there is more than one, change the others to have '0' and leave only one with the value '1'.
10) Choose "File->Save All".
Applies To:
* SmartDashboard NG with Application Intelligence R54
* SmartDashboard NG with Application Intelligence R55
* SmartDashboard NG FP3
* VPN-1/FireWall-1 NG with Application Intelligence R54
* VPN-1/FireWall-1 NG with Application Intelligence R55
* VPN-1/FireWall-1 NG FP3
* VPN-1/FireWall-1 NG FP2
* policy collection object
* policies collection
* Policy Packages
* FireWall-1 policies
* rulebase