topic Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly in Firewall and Security Management

Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Wolfgang — Thu, 21 Aug 2025 11:24:35 GMT

Fresh installed R82 gateway (Jumbo take 36, ElasticXL, VSNext)

Following message after login to console:

Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly.
for troubleshooting instructions, see sk181917 and examine this log file: /opt/CPsuite-R82/fw1/log/conf_param.elg

sk181917 isn't available in the knowledgebase. What does that mean ?

conf_param.elg shows:

conf_params;21-Aug-25 10:07:15;[INFO];<module>: ------------------ Start loading conf parameters ------------------
21/08/25 10:07:15: MainThread: confpLogger: INFO: ********************** Init Logger - New Run **********************
21/08/25 10:07:15: MainThread: lib_db: INFO: ********************** Init new redis-client **********************
conf_params;21-Aug-25 10:07:15;[INFO];main: --- Start running kiss ingestion for firewall securexl ppe ---
conf_params;21-Aug-25 10:07:15;[INFO];load_parameters_from_conf_file: There are no parameters to update from /opt/CPsuite-R82/fw1/modules/ingest_fwkern.conf.
conf_params;21-Aug-25 10:07:15;[INFO];load_parameters_from_conf_file: There are no parameters to update from /opt/CPppak-R82/conf/simkern.conf.
conf_params;21-Aug-25 10:07:15;[INFO];load_parameters_from_conf_file: There are no parameters to update from /opt/CPsuite-R82/fw1/modules/ingest_fwkern.conf.
conf_params;21-Aug-25 10:07:15;[INFO];load_parameters_from_conf_file: There are no parameters to update from /opt/CPsuite-R82/fw1/conf/dmd.conf.
conf_params;21-Aug-25 10:07:15;[INFO];main: Finish running /opt/CPsuite-R82/fw1/scripts/kiss_ingestion.py for all successfully
conf_params;21-Aug-25 10:07:15;[INFO];get_vs_dir_list: Adding VS-500 to the list.
conf_params;21-Aug-25 10:07:15;[INFO];get_vs_dir_list: Adding VS-3 to the list.
conf_params;21-Aug-25 10:07:15;[INFO];main: Modules to update for VS-0: firewall, securexl, ppe.
conf_params;21-Aug-25 10:07:15;[INFO];get_params_not_default_by_schema: No parameters to update for 'firewall' in VS-0.
conf_params;21-Aug-25 10:07:15;[INFO];get_params_not_default_by_schema: No parameters to update for 'securexl' in VS-0.
conf_params;21-Aug-25 10:07:15;[INFO];get_params_not_default_by_schema: No parameters to update for 'ppe' in VS-0.
conf_params;21-Aug-25 10:07:15;[INFO];main: Modules to update for VS-500: firewall.
conf_params;21-Aug-25 10:07:15;[INFO];get_params_not_default_by_schema: No parameters to update for 'firewall' in VS-500.
conf_params;21-Aug-25 10:07:15;[ERROR];set_exit_with_error: Error opening or writing to /opt/CPsuite-R82/fw1/CTX/CTX00500/conf/fw_params_v4.conf.tmp; [Errno 2] No such file or directory: '/opt/CPs
uite-R82/fw1/CTX/CTX00500/conf/fw_params_v4.conf.tmp'.
conf_params;21-Aug-25 10:07:15;[ERROR];set_exit_with_error: Error opening or writing to /opt/CPsuite-R82/fw1/CTX/CTX00500/conf/fw_params_v6.conf.tmp; [Errno 2] No such file or directory: '/opt/CPs
uite-R82/fw1/CTX/CTX00500/conf/fw_params_v6.conf.tmp'.
conf_params;21-Aug-25 10:07:15;[INFO];main: Modules to update for VS-3: firewall.
conf_params;21-Aug-25 10:07:15;[INFO];get_params_not_default_by_schema: No parameters to update for 'firewall' in VS-3.
conf_params;21-Aug-25 10:07:15;[INFO];<module>: ------------------ Done loading conf parameters ------------------

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Lesley — Thu, 21 Aug 2025 11:48:31 GMT

Have you seen https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_Gaia_AdminGuide/Content/Topics-GAG/Advanced-Gaia-Configuration-Global-Parameters.htm ?

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Wolfgang — Thu, 21 Aug 2025 14:44:51 GMT

@Lesley Yes, I saw it, sk181917 is mentioned in this but as I wrote not available. We changed nothing in fwkern.conf or other global parameters everything is default.

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

the_rock — Thu, 21 Aug 2025 15:13:04 GMT

I would definitely verify with TAC. I also searched for that sk, your link is the only thing that comes up.

Andy

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Lesley — Thu, 21 Aug 2025 16:25:36 GMT

Do you use factory image or one you have downloaded and put the box with isomorphic?

Try not to use factory image

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

emmap — Fri, 22 Aug 2025 03:51:11 GMT

Hi, this is an internal SK, please raise a TAC case for investigation.

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Wolfgang — Fri, 22 Aug 2025 08:04:22 GMT

We used isomorphic.

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Steffen_Appel — Fri, 22 Aug 2025 12:04:29 GMT

We have the same issue on one cluster since take 25, TAC case is open for weeks without much progress.

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

the_rock — Fri, 22 Aug 2025 12:08:28 GMT

Emma mentioned the sk is internal, maybe ask TAC about it?

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Lesley — Fri, 22 Aug 2025 12:48:22 GMT

Sorry only option I see for now is tac case especially if the sk is internal.

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Steffen_Appel — Mon, 25 Aug 2025 07:34:56 GMT

I just asked them about it - my assumption is that it is about using the registry instead of fwkern.conf

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

_Val_ — Mon, 25 Aug 2025 07:43:16 GMT

That SK is internal. I raised an issue with the relevant team. Meanwhile, please open a TAC request for your case

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

genisis__ — Mon, 25 Aug 2025 09:16:37 GMT

Might want to add this to the thread I created for Issues with ElasticXL and VSNext. Issues are getting resolved by Checkpoint, but for me ElasticXL with VSNext is still a little early for production use, and the documentation really should be updated so its separated out from Maestro documentation.

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Steffen_Appel — Mon, 25 Aug 2025 13:45:45 GMT

@Wolfgang is gaia_api status showing started for all processes?

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Steffen_Appel — Mon, 25 Aug 2025 13:55:10 GMT

They say the SK is about the kernel parameter syntax.

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

Sergei_Shir — Tue, 02 Sep 2025 18:34:03 GMT

Our apologies for the inconvenience.

This SK article accidentally remained internal after the release of the R82 version.

This SK article is now available here (will appear in the search later):

https://support.checkpoint.com/results/sk/sk181917

Re: Warning! Firewall / SecureXL / HyperFlow boot configuration was not completed correctly

_Val_ — Mon, 08 Sep 2025 06:45:59 GMT

The SK is now available:
https://support.checkpoint.com/results/sk/sk181917