topic Re: R81.20 - Waiting for another automatic update to finish in Firewall and Security Management

R81.20 - Waiting for another automatic update to finish

Mikael — Thu, 05 Oct 2023 14:37:09 GMT

Hello,

During upgrades to R81.20 I have on multiple occasions got stuck while trying to add a JHF with "Waiting for another automatic update to finish".

Sometimes the issue is resolved by stoping and starting DAagent (installer agent stop, installer agent start), sometimes I have to install something else (SmartConsole update), sometimes I have to remove the JHF and add it back manually.

I know of other colleagues that are facing the same issue during upgrades.

Has anyone found a more reliable solution?

With my approach it's more of a guessing-game what will solve the issue for the current upgrade...

Cheers

Re: R81.20 - Waiting for another automatic update to finish

nicolasr — Thu, 05 Oct 2023 18:27:05 GMT

Hi @Mikael ,

can you tell please, in which version you are, which setup it is, and which package are you trying to import?

If i understood correct, the issue is when importing when you are saying "adding"?

Re: R81.20 - Waiting for another automatic update to finish

Mikael — Thu, 05 Oct 2023 18:36:43 GMT

So far it’s mainly been management servers and log-servers running R81.10 with random JHF’s.
The issue occurs after upgrading to R81.20 and when we try to apply the current JHF. I have seen it with JHF24 and with JHF26.

The problem occurs regardless if the JHf was automatically downloaded from the cloud or manually imported.

When looking at the DA_action.xml there is nothing that looks strange. No other update that hasn’t finished. DA agent itself is the latest version.

Not sure what other updates that might interfere with the DA agent.

Re: R81.20 - Waiting for another automatic update to finish

nicolasr — Thu, 05 Oct 2023 18:39:35 GMT

What you mean by "apply" or "add"? you mean during the import? or during the installation?

Re: R81.20 - Waiting for another automatic update to finish

nicolasr — Thu, 05 Oct 2023 18:40:43 GMT

@Mikael Can you also tell please, what is the package name that you have performed the upgrade to R81.20?

Re: R81.20 - Waiting for another automatic update to finish

Mikael — Thu, 05 Oct 2023 18:42:54 GMT

The issue occurs once we click install on the JHF...

Re: R81.20 - Waiting for another automatic update to finish

Mikael — Thu, 05 Oct 2023 18:45:20 GMT

Check_Point_R81.20_T631_Fresh_Install_and_Upgrade.tar via https://support.checkpoint.com/results/download/124401

Re: R81.20 - Waiting for another automatic update to finish

nooni — Thu, 05 Oct 2023 19:09:02 GMT

The same issue happened to me, i solved by kill the process in expert mode.

Name of the process starts with DA.

expert: ps fauxww| grep -i da

then

kill -9 (insert pidhere)

This was together with a TAC engineer.

Re: R81.20 - Waiting for another automatic update to finish

Bob_Zimmerman — Thu, 05 Oct 2023 19:14:24 GMT

I get this all the time immediately after upgrades to a new version. Got it when upgrading to from R80.40 to R81.10 (Check_Point_R81.10_T335_Fresh_Install_and_Upgrade.tar), and getting it again when upgrading from R80.40 or R81.10 to R81.20 (Check_Point_R81.20_T631_Fresh_Install_and_Upgrade.tar). We end up simply waiting ~20 minutes after an upgrade before we try to install the jumbo.

I always assumed it was the deployment agent updating itself, fetching the package list from Check Point, or something like that. It has been mildly annoying, but not so bad I could justify the time to hunt down the cause.

Re: R81.20 - Waiting for another automatic update to finish

the_rock — Fri, 06 Oct 2023 00:52:16 GMT

I never had this issue happened to me and I cant even count how many upgrades I had done. I always make sure DA is set to auto update.

Andy

Re: R81.20 - Waiting for another automatic update to finish

G_W_Albrecht — Fri, 06 Oct 2023 10:13:20 GMT

What one can guess looking at top is that a SMS will take some time after an upgrade to be full up and running (and able to install JHFs) and SSH, GAiA WebGUI and Dashboard can connect. The ca. 20mins are a good estimate 😉

Re: R81.20 - Waiting for another automatic update to finish

Mikael — Fri, 06 Oct 2023 11:37:17 GMT

The management-server is up and running when this happens so I don't think it has anything to do with that part.

And the issue is not always solved by stopping and starting DA agent, regardless if it's via "installer agent stop", "installer agent start" or by killing the process in bash...

Sometimes I have to install something else and sometimes that doesn't work either...

So there must be something else hidden somewhere causing this automatic update failure.

Re: R81.20 - Waiting for another automatic update to finish

ishuyell — Mon, 16 Oct 2023 09:49:54 GMT

I had to reboot for this to resolve. Then hotfix installation was failing with failed with error "The previous installation of this package terminated abnormally" so delete this package and manually imported the hotfix and installed the fix.

Re: R81.20 - Waiting for another automatic update to finish

Axel_Winterberg — Mon, 30 Oct 2023 09:25:38 GMT

I have upgraded the management from R81.10 to R81.20. Then tried to install JHF T26. Error message "Waiting for another automatic update to finish". After Reboot, ... "The previous installation of this package terminated abnormally" .

So, I have deleted the package, downloaded it again and were able to install it successfully! 🙂

Re: R81.20 - Waiting for another automatic update to finish

Pedro_Madeira — Tue, 26 Mar 2024 13:33:58 GMT

I'm still getting this problem a lot, especially in management machines.

Many times when I upgrade to R81.20 and after the management upgrade tasks finish, I have a hard time installing the jumbo.

Most times I notice that autoupdatercli is dormant but I still get the "Waiting for another automatic update to finish" message. If I do a reboot, when the machine comes up, I see autoupdater resuming its updating tasks and then I'm able to launch the jumbo.

I'm currently facing an harder to solve issue, this is with a full-ha cluster (mgmt+fw) where everything I tried failed to successfully launch the jumbo installation.

After a reboot, I'm going to try to delete the jumbo installer, download and try to install it again.

Weird and annoying issue this one

Re: R81.20 - Waiting for another automatic update to finish

Arthur_DENIS1 — Tue, 07 May 2024 08:44:14 GMT

Hello

Still have the same issue, and it's not the first time....

It's maybe time for Checkpoint to provide us another upgrade package with a fix !

Re: R81.20 - Waiting for another automatic update to finish

G_W_Albrecht — Tue, 07 May 2024 09:23:06 GMT

Fact is that you have to wait after upgrading an SMS for some time before installing the Jumbo. Full Management HA is not something i would suggest to anyone...

Re: R81.20 - Waiting for another automatic update to finish

Sergio_Alvarez — Wed, 26 Jun 2024 00:12:08 GMT

I have experienced this issue with two different boxes in two consecutive days, both times trying to install JHF65 over R81.20, both times we waited a fair amount of time before trying to upgrade. The last time, for example, the Management finished upgrading from R81.10 to R81.20, we logged via SmartConsole, verified everything was in place, made sure it was possible to install policy in all managed gateways and also that logs from all gateways were received in real time, then closed SmartConsole, logged via Gaia webUI, generated a snapshot and THEN, finally tried to install JHF65... when the message about "waiting for another automatic update to finish" came up... I would say it was by far, enough time for everything to be in a stable situation.

What really makes me think is if it happened to me twice in 2 days, I'm pretty sure lots of other people have seen it and still, I could not find an SK document about it.

Both times I had to do what others here mentioned, reboot the SMS, remove the installer (as it said last time finished abnormally), download it again and execute the upgrade again.

Re: R81.20 - Waiting for another automatic update to finish

the_rock — Wed, 26 Jun 2024 02:21:32 GMT

I can only speak for myself...happened once, I did cprestart and worked fine after. This was back in R80.10

Andy

Re: R81.20 - Waiting for another automatic update to finish

Daniel_Szydelko — Wed, 26 Jun 2024 09:46:14 GMT

Hi,

I met the same on management with R81.20 when trying to install JHF Take_65 (on both boxes in HA), so for me worked such solution (reboot doesn't resolve it)

- when hit issue

- reboot

- delete JHF Take_65 package from repository

- download or upload it again

- try to install again JHF

Daniel.