topic Re: DA 1577 needed :) in Firewall and Security Management

DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 11:19:28 GMT

Import of package Check_Point_R80_10_JUMBO_HF_Bundle_T154_sk116380_FULL.tgz Failed

This package is not supported by current Deployment Agent build.

Please install CPUSE version 1567 or above to import the package.

hi Mates

can anyone share with me the TGZ with DA1577 as it seems TAC is too busy to do so

3-0650925051 does seem got stuck in a Q ... but I really need that DA urgently otherwise my MGMT HA collapse ...

---

pltatform: SMS on VM (eSXI) R80.10 DA 1511 build 421 with NO ACCESS TO CPUSE (Internet) - Only OFFLINE updates are possible

---

Re: DA 1577 needed :)

G_W_Albrecht — Tue, 04 Dec 2018 11:26:43 GMT

Why not use the download link here: sk92449: Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent ?

Re: DA 1577 needed :)

Kaspars_Zibarts — Tue, 04 Dec 2018 11:29:28 GMT

Can't you download it yourself from UC?

SK: Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent

Actual download link

Re: DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 11:42:15 GMT

Thanks. I could't find that direct URL Kaspars.

Cheers !

Re: DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 11:46:23 GMT

heh, that's what I thoughts:

Import of package DeploymentAgent_000001577_1.tgz Failed
Error occurred while trying to read hf.config file

Re: DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 11:47:42 GMT

same by clish:

SMS> installer import local /home/user/DeploymentAgent_000001577_1.tgz

Preparing package for import. This operation might take a few moments
Note: The selected package will be copied into CPUSE repository
Info: Initiating import of DeploymentAgent_000001577_1.tgz...
Interactive mode is enabled. Press CTRL + C to exit (this will not stop the operation)
Result: Import of package DeploymentAgent_000001577_1.tgz Failed
Error occurred while trying to read hf.config file.

Re: DA 1577 needed :)

G_W_Albrecht — Tue, 04 Dec 2018 11:53:08 GMT

Yes, that is as it is - i know that already. Unpack the CPda-00-00.i386.rpm and install it with:

[Expert@HostName:0]# rpm -Uhv --force CPda-00-00.i386.rpm

Re: DA 1577 needed :)

Mike_A — Tue, 04 Dec 2018 13:01:10 GMT

Here is what I have used in the past.

From sk92449:

# tar -zxvf DeploymentAgent_<build>.tgz
# rpm -Uhv --force CPda-00-00.i386.rpm
# killall -v clish clishd
# tellpm process:confd
# tellpm process:confd t
# $DADIR/bin/dastart

Re: DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 13:08:11 GMT

did that. thanks Gunther ! spot on

Re: DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 13:16:27 GMT

funny enough is that after the DA stop/start and reboot of VM I'm still on DA 1511 ... and I need to be on 1577 ...

Re: DA 1577 needed :)

Mike_A — Tue, 04 Dec 2018 13:23:07 GMT

sk92449 in section 3.A has the download to 1577. Download the tar and run through my commands below, you should not have to reboot the firewall to restart this service.

Re: DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 13:39:50 GMT

thanks Mike but as mentioned earlier I did all accordingly and still got 1511 on board - need 1577 and strugging to get there.

Re: DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 13:55:41 GMT

All - Sorted - DA 1577 on board on both MGMT HAs - now back to basics (Take154) -> wonder if some bumps on the way continues

ps. I do hate when SMS's has no CP Cloud access bypassing proxies ...

Re: DA 1577 needed :)

Mike_A — Tue, 04 Dec 2018 13:57:20 GMT

Can you run through the commands again, showing the output of each in a screen shot or copy and paste the text here? Also please show the output of command; clish -c "show installer status build"

Re: DA 1577 needed :)

Mike_A — Tue, 04 Dec 2018 13:58:35 GMT

What did you do to resolve the issue?

Re: DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 14:07:42 GMT

simple answer would be like this:

"Ups I did it again"

but seriously I just did the TAR instead of GZIP ... and that solved the problem.

now all seems on the right path Mike - thanks for the heads up! I do appreciate it

Re: DA 1577 needed :)

Mike_A — Tue, 04 Dec 2018 14:10:33 GMT

Sounds good, glad its working!

Re: DA 1577 needed :)

Jerry — Tue, 04 Dec 2018 14:11:39 GMT

Expert@SMS# clish -c "show installer status build"
CLINFR0771 Config lock is owned by user. Use the command 'lock database override' to acquire the lock.
Build number: 1577 (agent build is up to date)

Re: DA 1577 needed :)

G_W_Albrecht — Tue, 04 Dec 2018 15:50:04 GMT

Yes, that is the complete sequence...

Re: DA 1577 needed :)

Arthur_DENIS1 — Thu, 06 Dec 2018 08:16:09 GMT

About this, based on my own experience, we don't need to do this one: killall -v clish clishd

Anyone know why this is requested by the SK ?