This looks like a corner case, and I would work with Aruba Support to see what is the best way to get around this. Also, TAC can report this as a bug so it will be resolved in future software version.
You may, if you haven't yet, upgrade to a recent version of firmware in case it has been resolved in recent version.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Sep 12, 2022 04:46 PM
From: Matias Lisio
Subject: Problem with removing overwritten firewall CP
Hi Karol, i have the same error. I have the firewall cp list configured on the group level (MM) but unfortunetly i have a few lines on the controller level which i can´t deleted.
the only way that i found was doing a wipeup on that controller. i tried with a "disaster recovrey" but i had the same issue. If you found a better way please let me know.
regards.
Original Message:
Sent: May 05, 2020 07:21 PM
From: Karol Karkowski
Subject: Problem with removing overwritten firewall CP
Hi
I use firewall cp policies to control access to controller itself like ssh/https.
I have defined custom policies to allow/deny my custom networks.
As I have written in original post I would like to move those policies from local config to folder config, but it isn't possible it seems even one last rule block inheritance from folder level.
Of course there is solution to write erase and to reconnet MD to MM, but in my case for this moment this is not the case.
Maybe yes it is kind of defult, but how to avoid problem ?
Karol