This article describes the issue wherein the policy deploy fails with the error: ErrorMessage: application or application-set must be defined BadElement

On trying to deploy a policy from SDC, it fails with the error message:

ERROR MESSAGES

Error Type: Commit Error

deploy failed with error:[ErrorSeverity:error,ErrorPath:

[edit security policies from-zone ABC to-zone DEF policy ABC-toDEF match application]

,ErrorMessage:

application or application-set must be defined

,BadElement:

tcp2200

The configuration contains the config for tcp application which is to be set on the device. Example config:

CONFIGURATION

## Applications ##

set applications application icmp6-all_1 icmp6-type

set applications application icmp6-all_1 icmp6-code

set applications application tcp2200 description "Test"

set applications application tcp2200 protocol tcp

set applications application tcp2200 inactivity-timeout 1800

set applications application tcp2200 destination-port 2200

This config is configured on the device CLI as well is not accepted by the device snd results in an error.

This issue occurs because the config for the icmp6-type and icmp6-code is incomplete and hence the device rejects this config 

Example from the snippet above:

set applications application icmp6-all_1 icmp6-type

set applications application icmp6-all_1 icmp6-code

This config expects to have the icmp6-code and icmp6-type configured.

To resolve this, please perform either of the two:

1. Use the pre-defined service for icmp6-all rather than using the customized one.
2. Else, Navigate to SDC >> Shared Services >> Applications >> Look for the customized service icmp6-all_1 and configure the icmp6-code and icmp6-type for the service manually.

This issue will be fixed in the SDC version 25.2