This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Not able to delete a NAT policy

rfcat_vk over 8 years ago

Yesterday while trying to setup a rule to assist another forum users I created a NAT policy

When I try to delete a host I can't because it has an outstanding NAT policy.

Now the issue being, I cannot find the NAT policy anywhere to delete it.

I suspect I have to use the CLI, which is not logical or even intuitive.

This is my second attempt to post this thread. First one vanished into the ether.

This thread was automatically locked due to age.

0 lferrara over 8 years ago

Rfcat_vk,

strange that you cannot delete the NAT policy.

From CLI is not possible to delete firewall objects.

A restore from a previous version?

XG at the moment does not give us information where the object is used and even to force the remove process.

On ideas.sophos.com some time ago I opened the feature to force the delete operation but not yet implemented:

http://ideas.sophos.com/forums/330219-sophos-xg-firewall/suggestions/10812132-force-delete-object
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 8 years ago in reply to lferrara

Hi Luk,

I can't find the NAT policy to delete it is the problem.

I will restore from last weeks backup.
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 8 years ago

Hi rfcat_vk,

Go to System / Profile / Network Address Translation / delete. Check the drop-down for FW-rule and look if the NAT definition is seen in route through gateway option.

Hope that helps.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 8 years ago in reply to sachingurung

Hi Sachin,

thank you but no it did not help. The NAT was not seen in that menu item.

Since then I have restored a backup configuration.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to rfcat_vk

I was quite sure about the issue.

sachingurung we need a command from advanced shell to see where the NAT or other objects are used (sometimes even deleting host, user generate the same issue) in order to see where the object is referenced to and delete it.

This option was available on UTM9 and also was possible to force the remove of it.

I already opened the feature on ideas.sophos.com

http://ideas.sophos.com/forums/330219-sophos-xg-firewall/suggestions/10812132-force-delete-object

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 8 years ago in reply to lferrara

I agree
Cancel
Vote Up 0 Vote Down

Cancel
0 Janvan Zeggelaar over 7 years ago in reply to lferrara

I ran into this problem too.

But if I first disable the NAT rule (with the "switch" next to the edit button). I can delete it.
Cancel
Vote Up 0 Vote Down

Cancel
0 Big_Buck over 6 years ago

Status quo ...

Paul Jr
Cancel
Vote Up 0 Vote Down

Cancel