topic CPUSE issue in Cloud Firewall

CPUSE issue

Basilio_Alcant1 — Tue, 11 Oct 2022 17:17:47 GMT

Unable to install GA Take 66 on azure checkpoint firewall, i have access to the internet from the gateway but automatic check for updates is not brining the hotfix available under CPUSE and the manual import of the package is not working either. See screenshots attached.

This is a new cluster of firewalls i deployed recently using their azure marketplace template. One gateway got the take 66 update fine but the other one is not coming up for some strange reason.

Any help you can provide would be greatly appreciated.

Re: CPUSE issue

Dmitry_Gorn — Tue, 11 Oct 2022 17:21:39 GMT

Can you share the contents of /etc/cloud-version.json from both members?

Azure images were recently updated to include Take 66 pre-installed (image build R81.10-335.1108 released on Sep 30):

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132192

Please run: cpinfo -y all
And see if this take is already installed.

Thanks

Re: CPUSE issue

Basilio_Alcant1 — Tue, 11 Oct 2022 17:36:20 GMT

We used whatever template was available at the time of the deployment which was on 09/12. Even if there is a new image that has take 66 already, we are expecting the jumbo take to be available for installation on existing firewalls with previous versions of the image , so I m hoping I can install the hotfix instead of having to redeploy the gateways.

Below is the output of the file.

"release": "R81.10",

"take": "335",

"build": "985",

"platform": "azure",

"license": "byol",

"deployment_method": "GW",

"template_name": "ha",

"template_version": "20220130",

"template_type": "marketplace"

}

Re: CPUSE issue

Basilio_Alcant1 — Tue, 11 Oct 2022 17:38:08 GMT

cpinfo output:

This is Check Point CPinfo Build 914000227 for GAIA
[CPFC]
No hotfixes..
[IDA]
No hotfixes..
[MGMT]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[FW1]
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_GOT_TPCONF_AUTOUPDATE
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66

FW1 build number:
This is Check Point's software version R81.10 - Build 020
kernel: R81.10 - Build 021
[SecurePlatform]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[AutoUpdater]
No hotfixes..
[CPinfo]
No hotfixes..
[PPACK]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[DIAG]
No hotfixes..
[CVPN]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[CPUpdates]
BUNDLE_CPSDC_AUTOUPDATE Take: 21
BUNDLE_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE Take: 18
BUNDLE_GOT_TPCONF_AUTOUPDATE Take: 104
BUNDLE_HCP_AUTOUPDATE Take: 52
BUNDLE_R81_10_JUMBO_HF_MAIN Take: 66
[hcp_wrapper]
HOTFIX_HCP_AUTOUPDATE
[CPDepInst]
No hotfixes..
[cpsdc_wrapper]
HOTFIX_CPSDC_AUTOUPDATE

Re: CPUSE issue

the_rock — Tue, 11 Oct 2022 17:48:36 GMT

I believe DA build is not the newest one...does it give option to update it if you check for new packages?

Re: CPUSE issue

Basilio_Alcant1 — Tue, 11 Oct 2022 17:53:03 GMT

Hi @the_rock when i click on check for updates it does check for updates fine but no packages come up on CPUSE for me to download/install, by the way this behaviour doesn't happen on member 1 but member 2.

Re: CPUSE issue

the_rock — Tue, 11 Oct 2022 18:05:21 GMT

Did you try failover? Reboot?

Re: CPUSE issue

Basilio_Alcant1 — Tue, 11 Oct 2022 19:19:02 GMT

yes i did same issue.

Re: CPUSE issue

Chris_Atkinson — Tue, 11 Oct 2022 23:21:01 GMT

JHF T66 is shown already here?

Re: CPUSE issue

Gregory_Azratz — Wed, 12 Oct 2022 06:27:07 GMT

Hi @Basilio_Alcant1

can you please share the CPUSE logs

To collect all the relevant logs run the command:

da_cli collect_logs

It creates a tgz file on the folder where it was run, including all required files to analyze the issue.