topic Re: Unable to push threat prevention policy in General Topics

Unable to push threat prevention policy

Malik1 — Tue, 01 Sep 2020 12:57:43 GMT

Hi Experts.

After upgrading one of the cluster member to r80.30 from r77.30 im getting the error in attached file .So we have only upgraded the standby member and the active member is still on r77.30, when we change the the cluster version in smart console from r77.30 to r80.30 we are presented with this error in the attached file and threat prevention policy fails for both gateways.

If we change the cluster version on back to r77.30 the threat prevention policy get partially installed on the gateway with r77.30 and failed on gateway with r80.30 with below error

Status: Failed
- Installation failed. Reason: Failed to connect to the module, or the connection was lost.
--------------------------------------------------------------------------------

Any idea what the issue can be ?

Regards,

Sijeel Malik

Re: Unable to push threat prevention policy

Timothy_Hall — Tue, 01 Sep 2020 14:00:26 GMT

Force an immediate update of IPS, then do an "Update Images" for Threat Emulation.

Re: Unable to push threat prevention policy

Malik1 — Tue, 01 Sep 2020 21:20:28 GMT

Hi Tim,

Updated the IPS but that doesn't help and Threat Emulation is already updated (all green). I have a logged case with tac a they aren't sure about the issue. Changing the gateway versions in smart console from r80.30 to 77.30 (one member is on r77.30 and other on 80.30 ) allow me to push the threat prevention policy on the gateway with r77.30. with a warning in the threat updates "1 gateway is not updated " i.e is the upgraded one.

But if i change the version details in smart console to r80.30 the policy fails and an error below

Error: 'IPS' is not responding. Verify that 'IPS' is installed on the gateway. If 'IPS' should not be installed verify that it is not selected in the Products List of the gateway (SmartDashboard > Gateway > General Properties > Check Point Products List).

Regardsm

Sijeel

Re: Unable to push threat prevention policy

Tal_Paz-Fridman — Wed, 02 Sep 2020 08:31:19 GMT

In case you haven't used the latest R80.30 JHF please update and test again:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152

HTH

Tal

Re: Unable to push threat prevention policy

Malik1 — Wed, 02 Sep 2020 10:58:10 GMT

Hi Tal,

We are already on take -215 , should we move to take 217 ?

Reagrds,

Sijeel