topic SIC error after installing policies in Firewall and Security Management

SIC error after installing policies

Hllrdm — Tue, 01 Feb 2022 07:54:55 GMT

After updating the JHF on the R81, we encountered the SIC General Failure [error no. 148] error after installing the policies.
We checked tcpdump - no packets are missing between the gateway and the control server. We re-initiate the SIC, but the error reappears after installing the policies.
We found errors in cpd.elg:

register_my_addon: registered simplePA.
main: sic over ssl service won't be initialized (Probably not MGMT or CMA env)
Cpd started
cpd_mon_signal_handler: About to be killed by CP watchdog! Attempting graceful exit...

Has anyone encountered this problem? How can it be solved if it's not a network connection problem?

Re: SIC error after installing policies

G_W_Albrecht — Tue, 01 Feb 2022 08:03:30 GMT

The sk116861 gives a SIC reset as a solution, but that did not work here. I would suggest to contact CP TAC for a RAS.

Re: SIC error after installing policies

Daniel_ — Tue, 31 Jan 2023 09:28:16 GMT

We have the same issue on our VSX (in a VM as a copy from production).

Upgrade to R81.10 take81 has been fine. Then I changed interface via vsx_utils (eth4 -> bond4). On all VS I can install policy except VS0. If I turn off policy acceleration it's still not working.

Have you find a solution?

Re: SIC error after installing policies

Tal_Paz-Fridman — Tue, 31 Jan 2023 09:40:48 GMT

I would look at the following SKs first and then consider contacting TAC:

sk116861 Policy installation fails with "SIC General Failure [ SIC error no. 148 ]" error

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116861

sk173325 vsx_util change_private_net command fails

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk173325

Re: SIC error after installing policies

G_W_Albrecht — Tue, 31 Jan 2023 09:50:58 GMT

Contact TAC - this post is a year old and does not mention VSX at all !

Re: SIC error after installing policies

zsigmondrichar — Mon, 22 Jul 2024 08:09:13 GMT

Does anyone have a solution for this issue? We are facing the same problem during a cluster replacement. As soon as we replace the secondary member and install the first policy, the SIC connection breaks with the same error message. We are using R81.10 JHA Take 110.