topic Re: Show Package Tool stops with "severe error" in Firewall and Security Management

Show Package Tool stops with "severe error"

Matthias_Kring — Mon, 10 Jan 2022 12:26:15 GMT

I already used the showpackage tool (see sk 120342)several times, and it worked fine. (Management R81 T44, Tool version 2.06)

However, now it stops with

"[1/10/22 12:34 PM com.checkpoint.mgmt_api.examples.ShowPackageTool.logoutReportAndExit()INFO]: Script stopped running due to severe error!"

Is there any chance to find out the reason WHY it stops?

(or, what can I do to get it runnung again?)

Re: Show Package Tool stops with "severe error"

_Val_ — Mon, 10 Jan 2022 14:05:29 GMT

What do api.log and api.csv files say for the matter?

Re: Show Package Tool stops with "severe error"

the_rock — Mon, 10 Jan 2022 14:21:12 GMT

Just curious, what is exact flag you are using? I have same version/JHF in lab, so could check for you.

Andy

Re: Show Package Tool stops with "severe error"

Matthias_Kring — Tue, 11 Jan 2022 05:23:14 GMT

There is no api.log. api.csv contains lines like these:

2022-01-11,06:10:10 +0100,java-api-wrapper,127.0.0.1,127.0.0.1,show-access-rulebase,PASSED,31
2022-01-11,06:11:23 +0100,java-api-wrapper,127.0.0.1,127.0.0.1,show-objects,PASSED,44

All lines have "PASSED".

Re: Show Package Tool stops with "severe error"

Matthias_Kring — Tue, 11 Jan 2022 05:27:13 GMT

I didn't use any flags. Just starting /opt/CPsuite-R81/fw1/scripts/web_api_show_package.sh, which contains
java -jar $MDS_FWDIR/api/samples/lib/web_api_show_package-jar-with-dependencies.jar "$@"

I tried to use -s, but this didn't give any additional information

I'm logged in as admin in expert mode.

Re: Show Package Tool stops with "severe error"

the_rock — Tue, 11 Jan 2022 13:15:33 GMT

I ran it in R81 lab and used -k flag, worked just fine, no errors. Can you try with -k?

Re: Show Package Tool stops with "severe error"

Matthias_Kring — Tue, 11 Jan 2022 13:39:20 GMT

Besides RemoteAccessPolicy, we have two other policies on that mgmt server. A small one for some small CP appliances, and a big policy for the main firewall. -k works fine for the small policy, but the "Script stopped running due to severe error!" message is given with the big policy. Maybe it is too big to handle. It includes several inline layers.

Re: Show Package Tool stops with "severe error"

the_rock — Tue, 11 Jan 2022 13:55:28 GMT

There is definitely logic in what you said, though, I do remember doing this once for customer with more than 500 rules and different layers and worked fine, in R80.40, with -k flag.

Lets see if someone maybe from R&D can confirm. Found below, but does not apply to R81:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170414

Re: Show Package Tool stops with "severe error"

Matthias_Kring — Tue, 11 Jan 2022 14:01:19 GMT

just an additional info: our policy has grown very large during the last weeks, because we are doing a complete network redesign

Re: Show Package Tool stops with "severe error"

the_rock — Tue, 11 Jan 2022 14:07:37 GMT

Definitely could be an issue...