https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-Sandblast-MTA/m-p/92823#M13169 <P>We run two Sandblast MTA security gateways on version R80.30 for mail emulation. One is working fine, the second one never shows qemu-system-x86 when I look at "top". I therefore believe that the emulation is not working correctly.</P><P>When I check the statistics, the first one shows almost no errors, the second one shows the following statistics:</P><P>[Expert@ictsbap02:0]# tecli show statistics<BR />Last day Last week Last 30 days</P><P>General Information:<BR />--------------------<BR />Scanned files: 195 6135 15797<BR />Malicious files: 1 49 92<BR />Files filtered by static analysis: 141(72%) 4627(75%) 11980(75%)<BR /><STRONG>Files error count: 118 3796 10011</STRONG><BR />Files filtered by local cache: 52(26%) 1419(23%) 3615(22%)<BR />Files no resource count: 0 0 0<BR />Malicious files detected by HPS: 0 0 0<BR />Files error count in HPS: 116 3675 9714<BR />Average sample process time: 2 sec. 0 sec. 0 sec.<BR />Average sample size: 476707 bytes 541175 bytes 552515 bytes</P><P>There are more than 50% errors. Does anyone have an idea what I can do so that the qemu-system-x86 would run and I would have less errors?</P><P>I appreciate your help on that.</P><P>&nbsp;</P><P>&nbsp;</P> Thu, 30 Jul 2020 07:05:58 GMT bbruelhart 2020-07-30T07:05:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-Sandblast-MTA/m-p/92823#M13169 <P>We run two Sandblast MTA security gateways on version R80.30 for mail emulation. One is working fine, the second one never shows qemu-system-x86 when I look at "top". I therefore believe that the emulation is not working correctly.</P><P>When I check the statistics, the first one shows almost no errors, the second one shows the following statistics:</P><P>[Expert@ictsbap02:0]# tecli show statistics<BR />Last day Last week Last 30 days</P><P>General Information:<BR />--------------------<BR />Scanned files: 195 6135 15797<BR />Malicious files: 1 49 92<BR />Files filtered by static analysis: 141(72%) 4627(75%) 11980(75%)<BR /><STRONG>Files error count: 118 3796 10011</STRONG><BR />Files filtered by local cache: 52(26%) 1419(23%) 3615(22%)<BR />Files no resource count: 0 0 0<BR />Malicious files detected by HPS: 0 0 0<BR />Files error count in HPS: 116 3675 9714<BR />Average sample process time: 2 sec. 0 sec. 0 sec.<BR />Average sample size: 476707 bytes 541175 bytes 552515 bytes</P><P>There are more than 50% errors. Does anyone have an idea what I can do so that the qemu-system-x86 would run and I would have less errors?</P><P>I appreciate your help on that.</P><P>&nbsp;</P><P>&nbsp;</P> Thu, 30 Jul 2020 07:05:58 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-Sandblast-MTA/m-p/92823#M13169 bbruelhart 2020-07-30T07:05:58Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-Sandblast-MTA/m-p/93017#M13170 <P><EM>This was a license issue. The license was not correct and did not include Threat Emulation. Since I added a eval license the Sandblast appliance is working correctly.</EM></P> Fri, 31 Jul 2020 13:49:29 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Check-Point-Sandblast-MTA/m-p/93017#M13170 bbruelhart 2020-07-31T13:49:29Z