> Source: [sk183697](https://support.checkpoint.com/results/sk/sk183697)

# sk183697 - Import of a Large Policy Package Fails with Validation and API Errors in the Multi-Domain Server 

| Property | Value |
|----------|-------|
| Solution ID | sk183697 |
| Date Created | 2025-07-24 |
| Last Modified | 2026-02-18 |
| Technical Level | General |
| Products | Multi-Domain Security Management Server |
| Versions | R81.20, R82 |
| OS | Gaia |
| Platform | Open Server, 6000 |

## Symptoms

- * Import of a large policy package into a Domain using the script from [180923 - How to migrate a policy package between Security Management servers](https://support.checkpoint.com/results/sk/sk180923) fails in the production environment, but succeeds in non-production environments.

* Validation errors occur during the import process, including blocking errors such as:  


  "`More than one object named ... exists.`"

* 502 Proxy Errors and messages such as "`Error reading from remote server`" appear during the import, indicating Application Programming Interface (API) failures.

* SmartConsole and the Domain Management Server become unresponsive or unexpectedly close when attempting to open or modify the imported policy or layer.

* The imported policy layer becomes unusable in the policy package, and attempts to repair or modify it cause the Domain Management Server to unexpectedly crash.

* Attempts to add missing objects to rules fail due to API endpoint failures and duplicate object validation errors.

## Cause

The issue is caused by a combination of:

* Duplicate object names in the destination domain, and
* Strict API validation logic that blocks the import process.

When the import script encounters pre-existing objects in the target Domain (such as hosts), it attempts to skip them, using the `--skip-duplicate-objects true` parameter. However, the API still performs strict validation and returns blocking errors for duplicate objects. This results in incomplete rule definitions (for example, destination field set to None) and leaves the policy package in a corrupt state.  

Additionally, the high volume of API calls during import causes the API to become unresponsive, resulting in 502 Proxy Errors and further operational failures in the Domain Management Server.

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R82](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) starting from Take 73
* [Jumbo Hotfix Accumulator for R81.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) starting from Take 122

If you choose not to upgrade, Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/.contact-support/) to get a Hotfix for this issue.  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

<br />

**After you install the Hotfix,** do these actions:

1. Backup the Multi-Domain Server and affected Domains.  

2. Run this script to remove all validation errors from the affected Domain (Note - this step is only necessary if there are many validation errors due to a failed import):  
   `# ./deleteValidationIncidents_noSolr.sh`.  

3. Restart the Multi-Domain Server services. Run:  
   `# mdsstop;mdsstart`  

4. Set this environment variable to allow the import script to handle duplicate objects more gracefully:  
   `# export ACCESS_RULE_IGNORE_CASE_SENSITIVITY=1`  

5. Re-run the import script with the `--skip-duplicate-objects true` parameter.  

6. Verify import success and make sure that the policy package is usable without further validation or API errors.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content