topic Re: Alert message on Policy install after R81 upgrade in Firewall and Security Management

Alert message on Policy install after R81 upgrade

burticio — Thu, 02 Dec 2021 20:56:26 GMT

Hi, community!

I performed a Cluster Upgrade from R80.30 to R81. All worked fine, but lately every time I install the policy I get several alert messages:

"dlopen: /opt/CPsuite-R81/fw1/tmp/install_policy/1a63208f-5060-414e-834c-78ac7c585a54/FW1/lib/libcpatlas.so: cannot open shared object file no such file or directory"

I notice the file libcpatlas.so is being searched in a tmp directory.

¿How could I fix this?

The policy is installed correctly and all the rules work fine.

Thanks!

Re: Alert message on Policy install after R81 upgrade

the_rock — Fri, 03 Dec 2021 04:26:29 GMT

I had seen similar messages for one customer and when we rebooted the firewall, they went away. I have a feeling reboot clears those files in tmp directory...thats my best educated guess.

Re: Alert message on Policy install after R81 upgrade

Amogha_Chandras — Tue, 07 Dec 2021 09:28:35 GMT

This error occurs when there is a shared library missing from the gaia os

Shared Libraries are libraries that contain code loaded by programs when they start. Missing shared libraries can cause various issues. However, the issue occurs very rarely.

Best to open a tac ticket, there would be a requirement to copy the library from another machine onto this.

The library in this case is libcpatlas.so

Since it involves directories , best to perform under the guidance of the TAC experts

But the sk to use is sk162393

Re: Alert message on Policy install after R81 upgrade

Tal_Paz-Fridman — Tue, 07 Dec 2021 11:55:31 GMT

Hi,

I've sent a question to the relevant R&D owner. A similar issue was fixed in R81.10 and I'm checking to see if t might apply here or can be added to JHF as well.

Thanks

Re: Alert message on Policy install after R81 upgrade

burticio — Fri, 10 Dec 2021 23:03:29 GMT

UPDATE.

I checked the steps in sk162393, and I found the library exists in the gateways within the cluster. The library file is in the right directory $FW_DIR/lib/, and this path is set correctly in the LD_LIBRARY_PATH variable.

So I rebooted each member of the cluster. First the standby one. After it rebooted and checked the cluster worked correctly, I tried to install policy to check any changes, and it still showed the alerts.

I put the recently rebooted GW as active in the cluster, and rebooted the other one. After it rebooted, I checked the cluster was working correctly and installed policy again. The alerts were gone. I made some minor changes in the policy, as labels and logging options in tules, and installed the policy, again with no alerts.

But when I made a change in the objects (It was incorrectly set as internal one interface), and installed policy, the alerts showed again.

I made other changes in policy and installed it, but the alerts were gone again.

I will keep monitoring if the alerts shows again and in which cases, and if neccesary I will open Support case in TAC. Definitively the reboot made some changes, and it makes sense, as the enviroment variables were set correctly and a reboot should take them.

I will keep updatig the case.

Thanks!

Re: Alert message on Policy install after R81 upgrade

Nik_Bloemers — Thu, 20 Jan 2022 12:49:41 GMT

Did you have this resolved? I'm running into the same situation on R81 (with jumbo take 51).

Re: Alert message on Policy install after R81 upgrade

Tal_Paz-Fridman — Thu, 20 Jan 2022 13:58:40 GMT

After checking with relevant R&D owners, this is a known issue and was just added to the Known Limitation document.

The message can be safely ignored.

Tal

Re: Alert message on Policy install after R81 upgrade

Gary_Scott — Thu, 04 Aug 2022 15:44:46 GMT

I am seeing this too in a recent upgrade to 81.10 jumbo 66

Re: Alert message on Policy install after R81 upgrade

SP — Thu, 04 Aug 2022 19:16:41 GMT

We just upgraded from 80.40 jumbo 91 to 81.10 jumbo 66 yesterday and same things for us!

Re: Alert message on Policy install after R81 upgrade

Tal_Paz-Fridman — Mon, 15 Aug 2022 11:23:59 GMT

Just to update that the issue will be solved in a future JHF (still do not have additional details).

Thanks

Tal

Re: Alert message on Policy install after R81 upgrade

CPRQ — Tue, 16 Aug 2022 14:06:57 GMT

Hi Burticio and Community, We are also planning to cluster upgrade from R80.20 to R81.10. Do you recommend clean install OR in place upgrade. If we do clean install, do we have to set OSPF and static route again after upgrade? Also if possible can you please send the upgrade procedure/steps. Thanks

Re: Alert message on Policy install after R81 upgrade

SteveMad — Mon, 05 Sep 2022 14:26:13 GMT

Hi, we just updated from 81.10 T45 to T66 and we are having this issue. For us this seems to be impacting VPN connections with remote gateways. Policy seems to be inconsistent - if the central cluster is switched, tunnels are down until policy is pushed again

Regards,
Stefan

Re: Alert message on Policy install after R81 upgrade

Tal_Paz-Fridman — Mon, 05 Sep 2022 19:29:07 GMT

As far as we know the message itself is only only a cosmetic issue and should not impact functionality. As I wrote in a previous post it will be solved in a future JHF.

If you are running into other issues please contact our Support for a deeper investigation.

Re: Alert message on Policy install after R81 upgrade

Chris_Atkinson — Tue, 06 Sep 2022 00:02:47 GMT

Clean install will get you the new XFS file system for the gateway.

For instructions please refer:

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Installation_and_Upgrade_Guide/Topics-IUG/Getting-Started.htm

Re: Alert message on Policy install after R81 upgrade

Jones — Tue, 13 Sep 2022 11:35:34 GMT

Hi,

I just updated to R81.10 JHF 75, and this non-issue is still there.

Kind Regards,

Jones

Re: Alert message on Policy install after R81 upgrade

Nik_Bloemers — Fri, 17 Feb 2023 08:58:23 GMT

Still present in the latest take 87. What future jumbo is this planned for? This issue has been reported for 14 months now judging from this topic.

Re: Alert message on Policy install after R81 upgrade

cdelcarmen — Thu, 24 Oct 2024 14:19:15 GMT

R81.20 take 84, still showing this error everytime i push policy. no bueno

Re: Alert message on Policy install after R81 upgrade

Tal_Paz-Fridman — Thu, 24 Oct 2024 18:23:55 GMT

The issue should be fixed in R82.

Re: Alert message on Policy install after R81 upgrade

the_rock — Thu, 24 Oct 2024 18:28:01 GMT

Good to know!

Re: Alert message on Policy install after R81 upgrade

Kryten — Thu, 25 Sep 2025 07:46:35 GMT

Sorry to report that on R82, HotFix Take 39 the Issue is still there.