topic HCP errors in Firewall and Security Management

HCP errors

L180rMal35 — Mon, 31 Mar 2025 14:12:02 GMT

Hi CheckMates,

Customer has 3 x VSX pairs (CPAP 7K) running VSLS version R81.20 Jumbo HFA Take 92.

I was asked to run HCP against each firewall.

There are two checks I want to verify.

On each GW I'm getting same error related to FTCW and Licensing.

1. Gaia First Time Wizard Completed

2. Licensing

Is this true possitive, or is it some kind of bug?

There is one more check related to UC connectivity and that is not showing any errors.

Regards

Libor

Re: HCP errors

the_rock — Mon, 31 Mar 2025 14:30:01 GMT

Wonder if it could be cosmetic...how long they been in production?

Andy

Re: HCP errors

AkosBakos — Mon, 31 Mar 2025 14:51:21 GMT

Did you run the #hcp in VS0?

As I see there is "Virtual Systems" is written, and thre is no FTW by the VS creation.

Akos

Re: HCP errors

L180rMal35 — Mon, 31 Mar 2025 14:55:46 GMT

Since 2022

Re: HCP errors

L180rMal35 — Mon, 31 Mar 2025 15:45:53 GMT

I think Gaia FTCW is only relevant for VS0

I've used following command from VS0.

hcp -r all --include-wts yes --include-topology yes --include-charts yes -c 0 1 2 3 4 5 6 7 8 9 10 11

Libor

Re: HCP errors

the_rock — Mon, 31 Mar 2025 15:00:01 GMT

Then has to be cosmetic bug, makes no logical sense would show that.

Andy

Re: HCP errors

Lesley — Mon, 31 Mar 2025 18:02:20 GMT

Start to try if internet works from all VS system but VS0. VS0 looks good. VS 1 VS 2 etc also need internet access.

nslookup updates.checkpoint.com
curl_cli -v https://updates.checkpoint.com/WebService/Monitor

https://support.checkpoint.com/results/sk/sk164294

Re: HCP errors

AkosBakos — Mon, 31 Mar 2025 18:13:37 GMT

Let's say, if the VS doesn't reach the internet, that is not an issue. If not neccesary it is normal.

Re: HCP errors

the_rock — Mon, 31 Mar 2025 18:15:07 GMT

But not first time wizard error though...

Re: HCP errors

AkosBakos — Mon, 31 Mar 2025 18:16:33 GMT

Yes, that is interesting. Maybe this is a known bug, bu we don't know it only 🙂

Re: HCP errors

Lesley — Mon, 31 Mar 2025 19:05:50 GMT

Depends on what blades are active and features.

https://support.checkpoint.com/results/sk/sk106496

For example updateable objects are resolved from the vs itself

I would recommend internet access also for the vs systems.

Re: HCP errors

L180rMal35 — Tue, 01 Apr 2025 09:03:39 GMT

All virtual systems have internet access.