Customer has configured firewall authentication in the firewall policy in SRX to allow specific usernames to access network resources. The Import of the Firewall policy fails with the error "Import Firewall Policy <name> Failed".

The configuration for firewall authentication in the firewall policy is as below.

set security policies global policy fw-auth-1 then permit firewall-authentication web-authentication client-match abc

set security policies global policy fw-auth-1 then permit firewall-authentication web-authentication client-match def

set security policies global policy fw-auth-1 then permit firewall-authentication web-authentication client-match ghi

set security policies global policy fw-auth-1 then permit firewall-authentication web-authentication client-match jkl

set security policies global policy fw-auth-1 then permit firewall-authentication web-authentication client-match mno

The SD.log contains the below errors with respect to the Import firewall policy job.

Caused by: org.hibernate.exception.DataException: could not execute statement

Caused by: com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'webAuthClientName' at row 1

This is a known issue in the 24.1R4 and below versions of SD.

The fix for the above issue is available in the 24.1R5 version of SD and the below steps need to be followed to implement the fix.

• Upgrade to 24.1R5 SD version using the steps available at SD upgrade under the header "Installing and Upgrading Security Director Release 24.1R5".
• Before proceeding with the below commands, please take a backup of the JunOS Space database by following the steps available at Space Backup or please take a snapshot of the JunOS Space VM.
• Once you have upgraded to the 24.1R5 version, you need to run the below commands from the JunOS Space CLI.
  • mysql -ujboss -p$(grep mysql.jboss /etc/sysconfig/JunosSpace/pwd | awk -F= '{print $2}') sm_db
  • ALTER TABLE PolicyProfileEntityInternal MODIFY webAuthClientName VARCHAR(512);
  • ALTER TABLE RuleActionSettingCMEntity MODIFY webAuthClientName VARCHAR(512);

After following the above steps, please perform the Import of the firewall policy in SD and then once the import is a success, please proceed with the Publish / Update of the firewall policy.