topic Re: R81.10 management server with JHF OG take 38 install policy stucks at 50% in Firewall and Security Management

R81.10 management server with JHF OG take 38 install policy stucks at 50%

KostasGR — Tue, 01 Mar 2022 11:48:44 GMT

Hello

On a LAB environment i am facing an issue with install policy.

R81.10 management server with JHF OG take 38 install policy stucks at 50% towards a Gateway r80.30 take 210.

With fw stat i can see that the policy is installed successfully.

Any ideas?

Kostas

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

Tal_Paz-Fridman — Tue, 01 Mar 2022 11:51:22 GMT

Did you try installing policy again? does it also happen?

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

KostasGR — Tue, 01 Mar 2022 11:52:56 GMT

Yes it still happens.

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

Chris_Atkinson — Tue, 01 Mar 2022 12:17:09 GMT

Does the lab also comprise other R81.x gateways or only the R80.30 one?

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

KostasGR — Tue, 01 Mar 2022 12:49:07 GMT

Only R80.30. After many install policy retries and rebooting the LAB SMS the issue was solved.

Any ideas for the root cause?

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

Chris_Atkinson — Tue, 01 Mar 2022 13:14:28 GMT

What are the specs of the lab machines?

A reboot all but eliminates any theories I may have suggested prior without a detailed review of the logs.

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

G_W_Albrecht — Tue, 01 Mar 2022 13:19:07 GMT

You wrote that the issue was resolved - so every policy install is successfull now ? How long had the SMS been up ?

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

the_rock — Tue, 01 Mar 2022 14:25:26 GMT

You could check /var/log/messages files and see if there is anything there. I have same jumbo running on lab mgmt, though my gateways are R81.10, not R80.30

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

KostasGR — Tue, 01 Mar 2022 15:52:07 GMT

Hello again

The issue still persists.The policy stucks at 50% and with fw ctl zdebug drop on the gateway i can see the below.

@;418864;[cpu_3];[fw4_0];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_0];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_0];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_1];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_1];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_1];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_2];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_2];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_2];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_3];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_3];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_3];<0>Invalid license: VE license is required;

Do you think is related?Any ideas how to solve it? The Gateway is a VM.

BR,
Kostas

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

the_rock — Wed, 02 Mar 2022 00:23:53 GMT

Hm...I saw below forum, but not so sure those can safely be ignored...

https://community.checkpoint.com/t5/Cloud-Network-Security/Invalid-license-VE-license-is-required/td-p/12853

Is license same on both gateways? Can you confirm?

Andy

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

Chris_Atkinson — Wed, 02 Mar 2022 01:34:03 GMT

What license type & resources are assigned to the Gateway VM?

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

KostasGR — Fri, 11 Mar 2022 19:01:28 GMT

Hello all

Issue was solved/explained. The cause of the policy failure was that management server had 2 OS ethernet interfaces and on the smartconsole had defined only one interface on the MGMT object. After matching the MGMT server object with the OS ,issue was solved.

Thank you all for your replies!!

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

the_rock — Fri, 11 Mar 2022 19:04:06 GMT

O wow, amazing update, thanks for sharing...thats my favorite part of this community, people always willing to share the solution after the issue is solved, always helps! Have a nice weekend.

Andy

Re: R81.10 management server with JHF OG take 38 install policy stucks at 50%

Tal_Paz-Fridman — Sat, 12 Mar 2022 10:03:42 GMT

Thank you for the information.

I will move this to the relevant R&D owner so that we could improve the user experience in similar cases.