topic Anti-Bot and CPUSE updates failing in Firewall and Security Management

Anti-Bot and CPUSE updates failing

Maxim_Weinstein — Tue, 08 Jan 2019 19:13:51 GMT

I have a 5100 with R80.10 and the latest jumbo hotfix installed, running in standalone mode.

I am consistently getting "Update failed. Could not reach 'dl3.checkpoint.com'" for the Anti-Bot blade. In addition, CPUSE fails to download updates with "The package failed to download. Reason for failure: Bad or slow connection to the Check Point Cloud."

I have confirmed in the policy that no rules are blocking traffic. I can even see logged events showing an allowed http connection from the firewall to the IP address of dl3.checkpoint.com. I also checked that "Accept outgoing packets originating from Gateway" is enabled in Implied Policy->Configuration.

Traffic is able to flow from inside the firewall to the Internet without difficulty.

I can't think of any reason that the firewall would consistently have these two specific problems. Any thoughts?

Re: Anti-Bot and CPUSE updates failing

Kaspars_Zibarts — Fri, 21 Jun 2019 09:11:00 GMT

Have you checked connectivity SK?

https://community.checkpoint.com/thread/6992-sk83520-how-to-check-connectivity-to-cp

Re: Anti-Bot and CPUSE updates failing

Maxim_Weinstein — Wed, 09 Jan 2019 19:49:24 GMT

Thanks for the pointer. The script shows connectivity is all good (except push notifications, but that shouldn't be relevant to the issue).

Re: Anti-Bot and CPUSE updates failing

PhoneBoy — Thu, 10 Jan 2019 06:09:37 GMT

What is the CPU utilization during the time when these downloads are occurring?

Check historical data with cpview.