The important line is "Error writing file './swede/active_config.frm"
This essentially means that the active configuration cannot be written to the database.
Is your filesystem full? Try the output of a 'df' command at the CLI.
What version and patch are you currently at? If you have valid support you should call support to work through your issue.
Whenever you receive a Traceback such as this, it is recommended that you contact Technical Support for assistance. Tech Support may need to gather more information from your firewall in order identify the problem and provide a solution. Please call Tech Support at 1-888-847-8766, option 2, option 2, option 3 (Secure Computing products) or visit the support portal at http://mysupport.mcafee.com and open a web ticket.
I did a df and found that my /VAR directory was at capacity 100% I removed all the tmp and log files that I can find I am now at 94%, /var/spool is only at 26%. The one directory that has a lot of data is /var/packages. Can I delete all the old packages in this directory, and if so do I have to login in with the root or superuser ? I sroled and it won't let me delete any packages.
The Sidewinder does not have a 'root' or 'superuser' account; it is Type Enforcement that is prohibiting you from deleting the packages. It is not likely that removing these packages will resolve the issue. The issue is really with a corruption in the SWEDE database. Due to the sensitivity of this issue, we cannot post the resolution in a publicly accessible forum. However, if you open a ticket with Technical Support we can walk you through the steps to resolve this issue in a timely matter.
To find what is so large on /var run the following command:
du -ax | sort -n -r | less
The output will show the files/directories, sorted in descending size (the number displayed is the number of 512-byte blocks).
Usually when the /var partition fills up it is /var/mail. This directory keeps all the 'admin' user messages on the firewall. If no alias for 'root' has been configured, then it is common for messages to pile up over the years and fill the partition.
If /var/mail is the culprit you can delete the files in this directory (all your admin mail). I would then configure an alias for root which sends mail off the firewal to prevent this from happening in the future.
Thanks sooo much for the assistance. This resolved the issue. When I got the /var volume down to 94% I was then able to make edits to my policies and add policy objects. Once you responded with the Admin email cleaning. I deleted the /var/mail/ admin file and low and behold I had /var down to 11%. This being a development access point firewall I went ahead and checked all of my Sidewinders and all of the /var directories were reporting 80% or higher I deleted the mail files and all my firewalls /var volumes are now down to %20 or better.
I am definately going to schedule a change order and put an allias for the admin mail as suggested.
thanks for the help