https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cannot-Fetch-License-Information-due-to-Network-Error/m-p/47413#M9864 <P>Hi,</P><P>I have 2 Gateways in a VSX Cluster , recently i am facing the following error message on the standby member&nbsp; after enabling Antibot and Antiviris Blades - "Cannot Fetch License Information due to Network Error..."&nbsp; &amp; "Error -update failed contract entitlement check failed..could not reach updates.checkpoint.com", however the gateway is connected to internet and license is also intact . I changed the member to Active and then ran curl_cli -v updates.checkpoint.com and the updates were successful and the error removed , however when i switched it back to standby the same error reappeared.&nbsp;</P><P>I am running a similar setup on two other gateways under same internet connection but both the gateways are working fine.</P><P>How can i resolve this... Please help.</P><P>Thanks.</P> Mon, 18 Mar 2019 10:50:01 GMT LostBoY 2019-03-18T10:50:01Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cannot-Fetch-License-Information-due-to-Network-Error/m-p/47413#M9864 <P>Hi,</P><P>I have 2 Gateways in a VSX Cluster , recently i am facing the following error message on the standby member&nbsp; after enabling Antibot and Antiviris Blades - "Cannot Fetch License Information due to Network Error..."&nbsp; &amp; "Error -update failed contract entitlement check failed..could not reach updates.checkpoint.com", however the gateway is connected to internet and license is also intact . I changed the member to Active and then ran curl_cli -v updates.checkpoint.com and the updates were successful and the error removed , however when i switched it back to standby the same error reappeared.&nbsp;</P><P>I am running a similar setup on two other gateways under same internet connection but both the gateways are working fine.</P><P>How can i resolve this... Please help.</P><P>Thanks.</P> Mon, 18 Mar 2019 10:50:01 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cannot-Fetch-License-Information-due-to-Network-Error/m-p/47413#M9864 LostBoY 2019-03-18T10:50:01Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cannot-Fetch-License-Information-due-to-Network-Error/m-p/47417#M9865 <P>So it's an error on the standby member only. This is handled in <A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk43807&amp;partition=Advanced&amp;product=ClusterXL" target="_self">sk43807 -&nbsp;</A><SPAN><A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk43807&amp;partition=Advanced&amp;product=ClusterXL" target="_self">Anti-Virus / URL Filtering / IPS update fails on the Standby member of ClusterXL in High Availability mode</A>.</SPAN></P> Mon, 18 Mar 2019 10:54:39 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cannot-Fetch-License-Information-due-to-Network-Error/m-p/47417#M9865 Danny 2019-03-18T10:54:39Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cannot-Fetch-License-Information-due-to-Network-Error/m-p/48368#M9866 I tried the first 3 points in the SK but Still no success.. i am worried about what actually point no. 4 does .. will it impact the http.https.dns connections for the hosted servers as well ? is there any change to loose connectivity in production environment because of this ? Sat, 23 Mar 2019 08:07:24 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cannot-Fetch-License-Information-due-to-Network-Error/m-p/48368#M9866 LostBoY 2019-03-23T08:07:24Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cannot-Fetch-License-Information-due-to-Network-Error/m-p/49353#M9867 <P>Is this happening on VS0 or another VS? Have you tried running tcpdump/fw monitor on the standby VS to find our what exactly is happening with regards to NATting the outgoing traffic initiated by the standby cluster member?</P><P>I was facing the same issue and in my case setting fwha_arp_fwd_ccp_via_sync_if to "1" did the trick. You need to set this in VS0.</P> Sun, 31 Mar 2019 14:52:34 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Cannot-Fetch-License-Information-due-to-Network-Error/m-p/49353#M9867 Kilian_Huber 2019-03-31T14:52:34Z