topic Install policy error in Firewall and Security Management

Install policy error

TUNGPHAM — Tue, 08 Aug 2023 04:19:07 GMT

I am having the following problem:
when i install policy from SMC to gateway , i get error , and install process stops at 0% , it's been 2 hours and still 0% . Is there any way to cancel install this policy, or do I have to reboot checkpoint mgmt
Many thanks !!!!!

Re: Install policy error

just13pro — Tue, 08 Aug 2023 06:28:05 GMT

What is the error?

Re: Install policy error

TUNGPHAM — Tue, 08 Aug 2023 06:39:45 GMT

it not error , but it stuck at 0% long time , and i can't use SMC to create rules

Re: Install policy error

_Val_ — Tue, 08 Aug 2023 06:53:23 GMT

Reboot and try again. If the situation is still the same, open a support call with TAC, https://help.checkpoint.com

Re: Install policy error

TUNGPHAM — Tue, 08 Aug 2023 07:15:33 GMT

i reboot and it work
But after reboot checkpoint mgmt with cpstop, cpstart , i lost my audit log on SIEM
i export log with command : cp_log_export add name splunk target-server 10.*.*.* target-port 7171 protocol udp format splunk - -apply-now
before reboot it still had audit log and send alert to telegram
how can i check this

cp_log_export show

name: splunk
enabled: true
target-server: 10.*.*.*
target-port: 7171
protocol: udp
format: splunk
read-mode: semi-unified
export-attachment-ids: false
export-link: false
export-attachment-link: false
time-in-milli: false
export-log-position: false
reconnect-interval: Not configured, using default

i show cp_log_exort still running , and traffic log had still there

Re: Install policy error

MarcuzShinz — Tue, 08 Aug 2023 07:21:53 GMT

Hi Bro,

Could you check the SK:

https://support.checkpoint.com/results/sk/sk122323

https://community.checkpoint.com/t5/Management/Log-Exporter-guide/td-p/9035

Re: Install policy error

TUNGPHAM — Tue, 08 Aug 2023 07:33:54 GMT

thank you , i checked but not found anything

i had error after reboot
i don't know it does it affect this

Re: Install policy error

MarcuzShinz — Tue, 08 Aug 2023 07:38:23 GMT

Please check SK below:

https://support.checkpoint.com/results/sk/sk121217

Re: Install policy error

MarcuzShinz — Tue, 08 Aug 2023 07:43:34 GMT

Sorry, I haven't looked closely at the image you provided. In the picture I see the message "Task was interrupted because of server restart". If you can still install the policy now, everything looks fine.