topic Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways in Firewall and Security Management

MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

Aroma2118 — Thu, 03 Sep 2020 07:28:24 GMT

we recently upgraded MDS from 80.10 to 80.20 and now are getting policy installation errors when trying to push policies to 77.30 gateways. installations on 80.10 gateways work fine.

Status: Failed

- Failed to read rule file:

- "/opt/CPmds-R80.20/customers/CUSTOMER_NAME/CPR77CMP-R80.20/conf/POLICY_NAME_Policy.W", line 99: ERROR: Cannot use <::Host_10.0.0.1>: Not in Scope

- Failed to read rule-base '/opt/CPmds-R80.20/customers/CUSTOMER_NAME/CPR77CMP-R80.20/conf/POLICY_NAME_Policy.W': Connection timed out

- Operation ended with errors.

Checkpoint TAC said this is 'known issue' and we should upgrade to 80.30 but it's hard to believe there is no other fix...if it's known issue it should be listed somewhere..

Has anyone come across this problem before?

Thanks.

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

PhoneBoy — Fri, 04 Sep 2020 18:30:46 GMT

I recognize the error message but don’t remember the exact issue.
Can you PM me the relevant SR?

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

Tal_Paz-Fridman — Fri, 04 Sep 2020 18:58:21 GMT

We are also investigating this with R&D based on a similar issue.

Will update once have additional information.

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

Aroma2118 — Wed, 09 Sep 2020 06:39:53 GMT

Hello @Tal_Paz-Fridman

Is there any progress with that?

Regards,

Marek

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

Tal_Paz-Fridman — Wed, 09 Sep 2020 07:45:31 GMT

Hi,

Not yet. It is still under investigation.

However since it seems it might be happening to other customers I will escalate the issue.

Thank you for your patience,

Tal

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

Tal_Paz-Fridman — Wed, 09 Sep 2020 07:56:32 GMT

Small question, what R80.20 JHF do you currently have on top of R80.20?

Thanks

Tal

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

Aroma2118 — Wed, 09 Sep 2020 07:59:49 GMT

Hello,

we are running T173

HOTFIX_R80_20_JUMBO_HF_MAIN Take: 173

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

mschlumpberger — Wed, 09 Sep 2020 15:59:46 GMT

Hello,

do you have any updates? I got the same error in my enviroment.

Management: R80.20 T173

Gateways: R77.30

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

Chris_Wilson — Fri, 11 Sep 2020 05:23:14 GMT

I just got this error tonight too after installing Take 173 on our R80.20 MDS.

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

eranzo — Fri, 11 Sep 2020 06:45:26 GMT

The issue is fixed in R80.20 JHF Take 183.

We are promoting to release R80.20 JHF Take 183 as a GA version soon.

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

Tal_Paz-Fridman — Sat, 12 Sep 2020 12:28:01 GMT

Please refer to:

Jumbo Hotfix Accumulator for R80.20 (R80_20_jumbo_hf)

Re: MDS upgrade from 80.10 to 80.20 caused policy installation issues on 77.30 gateways

eranzo — Wed, 16 Sep 2020 08:06:03 GMT

Hi,

The issue that was found in R80.20 Jumbo Hotfix Take 173 (Policy installation to R77.30 gateway fails when using R80.20 Management with Jumbo Hotfix Take 173) is resolved with a new HF (Please refer to sk169259).

R80.20 Jumbo Hotfix Take 173 return to be the GA take for R80.20 Jumbo Hotfix.