topic Re: Jumbo hotfix anomaly. Anyone else seeing this?! in Firewall and Security Management

Jumbo hotfix anomaly. Anyone else seeing this?!

dumbhead123 — Fri, 04 Dec 2020 13:14:38 GMT

Hey everyone,

Before I explain the problem, the first time I saw behavior, assumed this be a unique problem, but this happened to completely different client running a different OS which begs me think that all the latest hotfixes seem to show case similar symptoms.

Client 1 - R80.30 currently running jumbo hotfix take 217 on a security gateway in HA.

We uploaded the hotfix to both appliances and run verifier. 1 gateway came through without any problems, the other gateway however failed stating a conflict and the conflict was take 191 itself which was weird and interesting at the same time. Running through the logs, here's what we see.

HF Check R80_30_JUMBO_HF_MAIN

Conflict found, version R80_30_JUMBO_HF_MAIN with hotfix :R80_30_JUMBO_HF_MAIN - details:
cr: PRJ-6627 files: cphaprob

Client 2 - R80.20 management server attempting to install take 183 over 111 and resulting conflict is take 111. Here's more on the logs,

HF Check R80_30_JUMBO_HF_MAIN

Conflict found, version R80_30_JUMBO_HF_MAIN with hotfix :R80_30_JUMBO_HF_MAIN - details:

cr: 00634812 files: hook_uepm_HOTFIX_R80_30_JUMBO_HF_MAIN

I just saw a community post from someone else with the same behavior. We ended up removing take 217 and 191, install 219 for client 1 but this brings to think if there is something going within the new jumbo takes for all these versions.

Have plans to install latest jumbo on R80.40 too. Curious if i would see them again

Re: Jumbo hotfix anomaly. Anyone else seeing this?!

shlomip — Fri, 04 Dec 2020 14:38:32 GMT

Hi @dumbhead123 ,

There is indeed an issue related to the CPUSE engine (DeploymentAgent), it is going to be fixed in matter of days.

There will be a new agent released soon to solve it. if you are working online you will get this update through CPUSE portal

and it will also be published in sk92449

Re: Jumbo hotfix anomaly. Anyone else seeing this?!

cjrnz — Mon, 07 Dec 2020 00:23:19 GMT

This is really not helpful when I'm already in my change window to patch some machines and now can't.

If Check Point really want us to auto-update things, the quality-control has to improve.

Re: Jumbo hotfix anomaly. Anyone else seeing this?!

David_Evans — Mon, 07 Dec 2020 15:05:43 GMT

Looks like a new version was just posted and it fixed the issue for me.

Re: Jumbo hotfix anomaly. Anyone else seeing this?!

MatanYanay — Tue, 08 Dec 2020 06:06:56 GMT

HI all

New DeploymentAgent Build 1999 started gradual deployment today with a fix for the conflict validation error during Jumbo upgrade.

if you face the upgrade errors described above, you should install the new DA from sk92449 and repeat the Jumbo upgrade.

Re: Jumbo hotfix anomaly. Anyone else seeing this?!

cjrnz — Tue, 08 Dec 2020 22:36:46 GMT

DA build 1999 and a bunch of extra paperwork worked for me. 😄