CheckpointFWContainer - Create Fanout disabled

Products

• Spectrum
• Network Observability

Issue/Introduction

We have checkpoints in use and have now also modeled the virtual instances, VSX has been activated so that the VSX are automatically modeled in the CheckpointFWContainer in Spectrum.

The problem now is that nothing can be modeled in the CheckpointFWContainer. Of course we want to display the connections in the container and 1-n is not possible, a fanout must be modeled in between, but this is not allowed.

Environment

DX Netops Spectrum

Cause

As of now model creation in checkpoint container is not supported

Resolution

As of now model creation in checkpoint container is not supported but we can create fanout using CLI and create relation with checkpoint container as a workaround.

To create fanout using CLI:

create model mth=0x100ae attr=0x1006e,val=<fanout model name> lh=<landscape_handle>

this command will print fanout model handle on CLI as output.
After this we can create a Collects relation with checkpoint firewall container:

create.exe association rel=Collects lmh=<checkpoint firewall container mh> rmh=<fanout mh>

That's a workaround to have fanout in checkpoint firewall container.