Cisco Secure Firewall Migration Tool Error Messages

First Published: 2020-05-15

Last Modified: 2020-10-29

Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

The documentation set for this product strives to use bias-free language. For purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on
age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that
is hardcoded in the user interfaces of the product software, language used based on standards documentation, or language that is used by a referenced third-party product.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1721R)
© 2022 Cisco Systems, Inc. All rights reserved.
 CONTENTS

CHAPTER 1 Secure Firewall Migration Tool Error Messages 1

About Troubleshooting for the Firewall Migration Tool 1

Logs and Other Files Used for Troubleshooting 2
Error Messages with Workaround 2
Error While Pushing Network Groups: No Data 2
VLAN Interface Type is Not Supported on This Device Model 2
Access-list in bulk [1 - 1000] Another operation by another user prevented this operation. Please
retry 3
Another operation by another user prevented this operation. Please retry after sometime. 3

Object deletion restricted for Outside. Remove object from the following: Device - AUMEL DHCP
Relay Se 3
Invalid logical name used by Ethernet1/2. The name is being used in policies that are not supported
by the Migration Tool. We recommend that you use a clean device for migration 3
System experienced internal issues, please check the logs 4
[PushException(PushException(Exception('Cannot modify the interface which is a member of
EtherChannel interface.',),),), 'interfaces'] 4
Management Center Connection Issue 4
Invalid URL 4
No Resource Found 5
network objects of type [host] bulk on [1-50] -
{"error":{"category":"FRAMEWORK","messages":[{"description":"Invalid object ? is not allowed
as the last character in an object description Please remove or replace ? and
retry"}],"severity":"ERROR"}} 5
Object with the same name already exists 5

Cisco Secure Firewall Migration Tool Error Messages

iii
Contents

Cisco Secure Firewall Migration Tool Error Messages

iv
 CHAPTER 1
Secure Firewall Migration Tool Error Messages
This document provides information about the messages that are generated by the Secure Firewall Migration
Tool, when an error occurs during configuration push to the management center.
• About Troubleshooting for the Firewall Migration Tool, on page 1
• Logs and Other Files Used for Troubleshooting, on page 2
• Error Messages with Workaround, on page 2

About Troubleshooting for the Firewall Migration Tool

A migration typically fails during the configuration file upload or, when the migrated configuration is being
pushed to the management center.
Firewall Migration Tool Support Bundle
The Firewall Migration Tool provides a support bundle that contains valuable troubleshooting information
such as log files, DB, and configuration files. To download the support bundle:
1. On the Complete Migration screen, click the Support button.
2. Check the Support Bundle check box and then select the configuration files to download.

Note The Log and DB files are selected for download by default.

3. Click Download.
The support bundle file is downloaded as a .zip to your local path. Extract the zip folder to view the log,
DB, and configuration files.
4. Click Email us to email the failure details to the technical team.
You can also attach the downloaded support files to your email.
5. Click Visit TAC page to create a Cisco Technical Assistance Center (TAC) case for this failure.

Note You can open a TAC case, at any time during the migration, from the support page.

Cisco Secure Firewall Migration Tool Error Messages

1
 Secure Firewall Migration Tool Error Messages
Logs and Other Files Used for Troubleshooting

Logs and Other Files Used for Troubleshooting

The table gives the name and location of files that are useful for identifying issues and troubleshooting them.

File Location
Log file <migration_tool_folder>\logs

Pre-migration report <migration_tool_folder>\resources

Post-migration report <migration_tool_folder>\resources

unparsed file <migration_tool_folder>\resources

Error Messages with Workaround

If you encounter any other issues, contact Cisco Technical Assistance Center (TAC) case for this failure and
provide them with the support bundle that is downloaded from the Firewall Migration Tool.

Error While Pushing Network Groups: No Data

Explanation Recommended Action

This error occurs in the source configuration file, Check the Verbose logs on the Firewall Migration
when there is an object that has no IP Address or port Tool to identify the file that has the error. Extract the
value defined to it. configuration file again using the Web Visualization
Tool as this problem occurs because of an export issue
in Check Point. If the issue persists, contact TAC to
create a TAC case for this failure and provide them
with the support bundle that is downloaded from the
Firewall Migration Tool.

VLAN Interface Type is Not Supported on This Device Model

Explanation Recommended Action

This error occurs if you are using an older version of Download the latest version of the Firewall Migration
the Firewall Migration Tool. Tool to proceed with the migration.

Cisco Secure Firewall Migration Tool Error Messages

2
 Secure Firewall Migration Tool Error Messages
Access-list in bulk [1 - 1000] Another operation by another user prevented this operation. Please retry

Access-list in bulk [1 - 1000] Another operation by another user prevented this

operation. Please retry
Explanation Recommended Action

This error occurs when multiple users try to connect Avoid multiple connections to the management center
to the management center as the Firewall Migration when the Firewall Migration Tool is migrating a
Tool during the migration. configuration.

Another operation by another user prevented this operation. Please retry after
sometime.
Explanation Recommended Action

This error occurs when multiple users try to connect Avoid multiple connections to the management center
to the management center as the Firewall Migration when the Firewall Migration Tool is migrating a
Tool during the migration. configuration.

Object deletion restricted for Outside. Remove object from the following:
Device - AUMEL DHCP Relay Se
Explanation Recommended Action

This error occurs when the management center has Clear the existing configurations on the management
several existing configurations and the Firewall center and proceed with the migration. If the issue
Migration Tool is unable to clear the attributes of the persists, contact Cisco TAC to create a TAC case for
device-specific configurations during the Push Phase. this failure and provide them with the support bundle
downloaded from the Firewall Migration Tool.

Invalid logical name used by Ethernet1/2. The name is being used in policies
that are not supported by the Migration Tool. We recommend that you use a
clean device for migration
Explanation Recommended Action

This error occurs when the management center has Clear the existing configurations on the management
several existing configurations and the Firewall center and proceed with the migration. If the issue
Migration Tool is unable to clear the attributes of the persists, contact Cisco TAC to create a TAC case for
device-specific configurations during the Push Phase. this failure and provide them with the support bundle
downloaded from the Firewall Migration Tool.

Cisco Secure Firewall Migration Tool Error Messages

3
 Secure Firewall Migration Tool Error Messages
System experienced internal issues, please check the logs

System experienced internal issues, please check the logs

Explanation Recommended Action

This error occurs when the management center has Clear the existing configurations on the management
several existing configurations and the Firewall center and proceed with the migration. If the issue
Migration Tool is unable to clear the attributes of the persists, contact Cisco TAC to create a TAC case for
device-specific configurations during the Push Phase. this failure and provide them with the support bundle
downloaded from the Firewall Migration Tool.

[PushException(PushException(Exception('Cannotmodifytheinterfacewhich
is a member of EtherChannel interface.',),),), 'interfaces']
Explanation Recommended Action

This error occurs when the management center has Clear the existing configurations on the management
several existing configurations and the Firewall center and proceed with the migration. If the issue
Migration Tool is unable to clear the attributes of the persists, contact Cisco TAC to create a TAC case for
device-specific configurations during the Push Phase. this failure and provide them with the support bundle
downloaded from the Firewall Migration Tool.

Management Center Connection Issue

Explanation Recommended Action

This error occurs when the Firewall Migration Tool Check the network connectivity.
loses connectivity to the management center.

Invalid URL
Explanation Recommended Action

This error occurs when the Firewall Migration Tool Refer to the Firewall Migration Tool User Guide and
supports the migration of a particular feature. For upgrade the management center or threat defense to
example, ACE Category Migration. The management the required version.
center or the threat defense is not of the version that
has the API support for the feature.

Cisco Secure Firewall Migration Tool Error Messages

4
 Secure Firewall Migration Tool Error Messages
No Resource Found

No Resource Found
Explanation Recommended Action

This error occurs when the Firewall Migration Tool Refer to the Firewall Migration Tool User Guide and
supports the migration of a particular feature. For upgrade the management center or threat defense to
example, ACE Category Migration. The management the required version.
center or the threat defense is not of the version that
has the API support for the feature.

network objects of type [host] bulk on [1-50] -

{"error":{"category":"FRAMEWORK","messages":[{"description":"Invalidobject
? is not allowed as the last character in an object description Please remove
or replace ? and retry"}],"severity":"ERROR"}}
Explanation Recommended Action

This error occurs when there are special characters in Check the Verbose logs to identify the source
the Object description parameter of an object. configuration and the object where the special
characters, not supported by management center, were
used. Correct the source configuration, upload, and
migrate the configuration again using the Migration
Tool.

Object with the same name already exists

Explanation Recommended Action

This error occurs when Firewall Migration Tool is Resume the migration, revalidate, and push the
unable to validate the parsed configuration against configuration by selecting resume > validate > push.
the configuration elements available on the
management center such as objects. This can be
caused by any one of several reasons such as loss of
connectivity.

Cisco Secure Firewall Migration Tool Error Messages

5
 Secure Firewall Migration Tool Error Messages
Object with the same name already exists

Cisco Secure Firewall Migration Tool Error Messages

6