EPS Policy server - no sync

GianniPapetti — Sun, 14 Feb 2021 14:07:26 GMT

Hi there,

i'm trying to install a dedicated EPS Policy Server with 80.40 last updated solutions.

Everything seems to be fine in SmartConsole, but when looking at SmartEndpoint, it says "1 Policy Server out of sync".

After some investigation i found these logs entry in server-messages.log of dedicated EPS Policy Server:

[2021-02-14T15:04:11,988] INFO Connection Point State Machine - Retrieved file: sic://xxxxxxx:18193/cp/file/501/00000000-0000-0015-0000-000000000016 and saved to local path: /opt/CPuepm-R80.40/engine/webapps/CP/cache/PAT_DIFF/PAT_DIFF.0. File size: 2KB, download took 1s (FileDownloader)
[2021-02-14T15:04:11,989] ERROR Connection Point State Machine - Error performing sync with EPS (ConnectionPointStateMachine)
java.lang.NullPointerException: null
at com.checkpoint.uepm.api.blmconnector.PolicyAssignmentTableDiff.addPolicyAssignmentToPat(PolicyAssignmentTableDiff.java:508) ~[unity.jar:?]
at com.checkpoint.uepm.api.blmconnector.PolicyAssignmentTableDiff.handlePolicyAssignments(PolicyAssignmentTableDiff.java:446) ~[unity.jar:?]
at com.checkpoint.uepm.api.blmconnector.PolicyAssignmentTableDiff.updatePat(PolicyAssignmentTableDiff.java:308) ~[unity.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.file.PATSynchronizer.synchronizeDiff(PATSynchronizer.java:151) ~[connectionPoint.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.statemachine.ConnectionPointStateMachine.resolveSyncResponse(ConnectionPointStateMachine.java:788) ~[connectionPoint.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.statemachine.ConnectionPointStateMachine.access$1100(ConnectionPointStateMachine.java:47) ~[connectionPoint.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.statemachine.ConnectionPointStateMachine$Sync.execute(ConnectionPointStateMachine.java:501) [connectionPoint.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.statemachine.ConnectionPointStateMachine.run(ConnectionPointStateMachine.java:247) [connectionPoint.jar:?]
at java.lang.Thread.run(Thread.java:820) [?:2.9 (02-19-2020)]

Hope someone could point me to the right direction.

Best regards.

Re: EPS Policy server - no sync

PhoneBoy — Sun, 14 Feb 2021 16:58:32 GMT

Probably need a TAC case to see what’s going on.

Re: EPS Policy server - no sync

GianniPapetti — Sun, 14 Feb 2021 17:09:36 GMT

Hi,

fortunately EPPS is still in development and not in production, if needed i could do some more esotic actions 🙂

Best regards,

Re: EPS Policy server - no sync

GianniPapetti — Mon, 15 Feb 2021 08:15:12 GMT

Ok,

after some more investigation i downgraded security management console to take 78 instead of take 91 and re-installed external EPS Policy Server.

Everything works as expected. Maybe was something during SMC/EPS update.

Will try a new upgrade after backup/snapshot.

Regards,

Gianni.

Re: EPS Policy server - no sync

J_B — Mon, 22 Feb 2021 16:20:41 GMT

Is your policy server at the same patch level as your management server? If they're different then I've seen issues before with them being out of sync.

topic Re: EPS Policy server - no sync in Endpoint

EPS Policy server - no sync

Re: EPS Policy server - no sync

Re: EPS Policy server - no sync

Re: EPS Policy server - no sync

Re: EPS Policy server - no sync