topic Re: Problem with the AntiBot blade. in Firewall and Security Management

Problem with the AntiBot blade.

Matlu — Mon, 18 Dec 2023 16:36:42 GMT

Hello, everybody.

I have a ClusterXL HA, version R81.10.
Currently one of the members is "down", but the other member is still working.

The problem is that in the SmartConsole, in the Cluster object, I have 2 alerts, one that refers to a "ClusterXL: Problem", which is acceptable, but we have another alert that is focused on the member that is currently working, that alert says "Anti-Bot DB Update Failed".

That GW has internet connectivity, DNS is working fine.
I have executed the command "cpstat antimalware -f update_status" and it shows me the following.

Any way to "mitigate" the alert related to the Anti-Bot blade?

Best regards.

Re: Problem with the AntiBot blade.

the_rock — Mon, 18 Dec 2023 20:00:55 GMT

Hey bro,

Its possible could be related to below, just came out today.

Andy

https://community.checkpoint.com/t5/Security-Gateways/sk181803-Possible-failure-to-boot-on-a-Security-Gateway-with-IPS/m-p/200935#M37745

Re: Problem with the AntiBot blade.

nicolasr — Thu, 28 Dec 2023 08:40:20 GMT

Hi @Matlu , can you tell please if there is a Jumbo installed? if yes, which please? thank u!

also it might be related to internet connection as the output shows.. u said u have connection to the internet and dns is fine, did u checked proxy and all relevant settings? do u reach cloud updates on webui on the gw ip address?

thanks in advance!

Re: Problem with the AntiBot blade.

G_W_Albrecht — Thu, 28 Dec 2023 08:44:26 GMT

I have experienced messages like that, but they did vanish the next day.

Re: Problem with the AntiBot blade.

the_rock — Thu, 28 Dec 2023 13:19:22 GMT

I agree with that, makes sense.

Best,

Andy