topic Policy Installation fail on gateway Error 1-2000012 in Firewall and Security Management

Policy Installation fail on gateway Error 1-2000012

Duminda_SAT — Sat, 18 Dec 2021 19:51:12 GMT

Hi Need Urgent Advice for this, Policy Installation fail and we can have below output

[Expert@FW02:0]# dynamic_objects -l

File is empty

any one have any idea.

* Which level create this object DB, Example : SIC Initiation etc. *

can we recreate this DB without install policy?

Thank you,

Duminda Lakmal

Re: Policy Installation fail on gateway Error 1-2000012

the_rock — Sat, 18 Dec 2021 20:18:50 GMT

Have you tried below?

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166194

Andy

Re: Policy Installation fail on gateway Error 1-2000012

Duminda_SAT — Sat, 18 Dec 2021 21:22:34 GMT

I Tried, But Failed. no luck.

Re: Policy Installation fail on gateway Error 1-2000012

PhoneBoy — Sun, 19 Dec 2021 02:34:06 GMT

Initially creating dynamic objects requires an install policy, as I recall.
Updating said objects does not require a policy install.

Re: Policy Installation fail on gateway Error 1-2000012

Tal_Paz-Fridman — Sun, 19 Dec 2021 06:49:19 GMT

1| Have you also checked sk154435 -

"Policy installation failed on gateway. If the problem persists contact Check Point support (Error code: X-XXXXXXX)" error during policy installation

https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eventSubmit_doGoviewsolutiondetails=&solutionid=sk154435#1-2000012

2| What is the output in $FWDIR/log/install_policy.elg for this specific flow?

Re: Policy Installation fail on gateway Error 1-2000012

the_rock — Sun, 19 Dec 2021 16:42:59 GMT

I think what @Tal_Paz-Fridman said makes total sense. Maybe check that file and see what you get...have you confirmed if SIC state is good and if fw fetch works at all? You can also attempt to push policy using mgmt_cli as well, but Im afraid result would be the same.

https://sc1.checkpoint.com/documents/latest/APIs/#cli/install-policy~v1.8%20

Re: Policy Installation fail on gateway Error 1-2000012

Duminda_SAT — Tue, 21 Dec 2021 07:48:31 GMT

Hi Team,

I Really Appreciate Given Advice on This Critical Senario. According to Sk154435 and TAC Team Help us to resolve this issue.

Stop CPD process with the command:

# cpwd_admin stop -name CPD -path "$CPDIR/bin/cpd_admin" -command "cpd_admin stop"
Stop FWD process with the command:

# cpwd_admin stop -name FWD -path "$FWDIR/bin/fw" -command "fw kill fwd"
On the Gaeway environment remove the Online Services directory using the following command:

# rm -rf $CPDIR/database/downloads/ONLINE_SERVICES/
Start CPD process: # cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd"
Start FWD process: # cpwd_admin start -name FWD -path "$FWDIR/bin/fwd" -command "fwd"
Install the Security policy.

Above mentioned Resolution not Succeed then we have re-initiate the SIC & stop all firewall service and logged through console and run

# rm -rf $CPDIR/database/downloads/ONLINE_SERVICES/

Issue Resolved, also I have notified this issue came with Dynamic Country Object, once removed from rule base 1-2000012 issue fixed.