topic Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed in Firewall and Security Management

Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

wrios12 — Tue, 04 Feb 2025 21:35:21 GMT

Hello CheckMates,

I'm having the following problem with this error: "Update failed. Error checking contract rights. The gateway cannot access the Internet ('https://updates.checkpoint.com/WebService/services/DownloadMetaDataService'). Check connectivity and proxy settings".

I have an R81.20 HFA TAKE 92 cluster and I have validated my internet connection, which has access to updates.checkpoint.com, however, the error persists.

Could you help me? I have already opened a case with the TAC but have not made any progress in solving the problem.

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

Lesley — Wed, 05 Feb 2025 11:41:00 GMT

Is this issue active on both cluster members? How long is this issue active? Did it start after upgrade or reboot?

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

wrios12 — Wed, 05 Feb 2025 12:41:49 GMT

Hello, yes. The problem started two months ago and is applying to both gateways.

The TAC suggested us to update the take (HFA) to the latest one to solve it but the problem persists.

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

the_rock — Wed, 05 Feb 2025 13:50:12 GMT

Can you see if same shows up when you run exact command like below?

[Expert@R82:0]# curl_cli -k updates.checkpoint.com
Page not found![Expert@R82:0]#

Also, do you see the same if you right click on the object in smart console and go to monitor?

Andy

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

wrios12 — Wed, 05 Feb 2025 14:32:55 GMT

I ran the command and it says ''page not found”.

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

the_rock — Wed, 05 Feb 2025 14:38:29 GMT

Looks right. Where are you located? We can do remote little later on if allowed. I can spare some time on my break.

Andy

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

wrios12 — Wed, 05 Feb 2025 14:47:27 GMT

In what time frame are you free and what time zone are you in?

My time zone is GMT-4, so I can connect in advance to the gateways.

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

the_rock — Wed, 05 Feb 2025 14:49:43 GMT

I believe we are GMT-5 (its EST). Its almost 10 am here.

Andy

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

wrios12 — Wed, 05 Feb 2025 14:55:00 GMT

I understand, please indicate your break time for us to connect and review

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

the_rock — Wed, 05 Feb 2025 14:56:48 GMT

Just message me directly and we will connect. Im good for 12.30 pm est, so 2.5 hours from now.

Andy

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

wrios12 — Wed, 05 Feb 2025 15:03:26 GMT

I have already written to you by direct message

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

the_rock — Wed, 05 Feb 2025 15:09:32 GMT

Yes, already responded, lets correspond there and I will update once we do remote.

Andy

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

the_rock — Wed, 05 Feb 2025 18:19:35 GMT

Hey guys,

Just spoke with Edward and here are my notes. Based on all I now know, Im fairly confident this is not CP issue, but @wrios12 , if you can verify with ISP provider, let us know what they say.

Andy

RS notes:

remote session

error -> Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

tested connectivity with curl_cli -k, verified routing, licences, contract file -> all good

opened "old school" sv monitor -> same error

TAC asked them to delete and re-create entitlement file, restart cpd process, but no change

We disabled av and ab. installed policy

re-enabled -> updates still fail, though error is back

Edward also mentioned 2nd cluster with exact same, one internal and one extarnal with exact SAME problem

sounds like it could be Internet line issue, not the fw itself

They may do packet capture on the router itself and check further

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

the_rock — Wed, 05 Feb 2025 20:16:12 GMT

Hey everyone,

Appears issue was indeed related to ACL on ISP router, as @wrios12 advised me after we had remote sesison. Seems this was actually blocking the connection to Akamai.

Great job @wrios12 , glad it all works fine now.

Thanks again for your time.

Andy

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

wrios12 — Fri, 07 Feb 2025 16:28:41 GMT

@the_rock Thank you for your support, it was a pleasure to have shared the remote session with you to solve my problem.

Re: Anti-Bot/Anti-Virus update failed. Update failed. Contract entitlement check failed

the_rock — Fri, 07 Feb 2025 16:30:33 GMT

Any time mate, I will always do my best to help folks. Anyway, I think I gave you my personal email, so you can message there whenever you like.

Cheers,

Andy