topic Re: Threat Policy Install failed in General Topics

Threat Policy Install failed

handiansudianto — Sat, 01 Apr 2023 08:47:01 GMT

Hello,

I upgrade my checkpoint from 80.40 to 81.10 and after upgraded i got error below if i use latest IPS version, but if i use old IPS the threat policy is successfull.

Policy: Standard
Status: Failed
    - amw_load_copy_file_to_local: cpFileCopy() failed to copy file sd_updates
    - amw_load_copy_file_to_local: amw_load_copy_file_to_local() sd_updates failed from /opt/CPsuite-R81.10/fw1/tmp/install_policy/d381d0a2-9336-4e10-a181-32cbe182b6b0/FW1/conf/install_manager_tmp/ANTIMALWARE_CURRENTVERCMP/conf to /opt/CPsuite-R81.10/fw1/state/local/AMW.tmp dst file anme
    - amw_load_add_state_files: amw_load_copy_file_to_local() failed, file=sd_updates
    - amw_load: amw_load_add_state_files() failed
    - Operation was unsuccessful.

Re: Threat Policy Install failed

the_rock — Sat, 01 Apr 2023 12:22:04 GMT

Just as a simple test, can you try uncheck IPS blade, push policy, recheck and then try again?

Andy

Re: Threat Policy Install failed

handiansudianto — Sat, 01 Apr 2023 12:27:26 GMT

without IPS enable, the threat policy install is successfully.

Now my IPS using version 635158746 , and if using version 635232122 threat policy is failed to install.

Re: Threat Policy Install failed

the_rock — Sat, 01 Apr 2023 12:46:18 GMT

Just tested in R81.10 and R81.20 with latest IPS package and worked fine, so has to be your environment. Can you run below command?

fw stat -b AMW

Are you using autonomous threat prevention possibly?

Andy

Re: Threat Policy Install failed

the_rock — Sat, 01 Apr 2023 12:50:48 GMT

Below is what Im referring to.

Andy

Re: Threat Policy Install failed

Tal_Paz-Fridman — Sat, 01 Apr 2023 17:18:50 GMT

Can you try to update IPS again to see if it solved the issue (it might be a mismatch in IPS versions).

Re: Threat Policy Install failed

HeikoAnkenbrand — Sat, 01 Apr 2023 17:30:38 GMT

Hi @handiansudianto

See sk167633 "Errors while loading Threat Prevention policy, Operation was unsuccessful" in the log.

Solution

Perform an IPS update on the Domain.

1. Log in to the Domain on the active CMA.

2. Select "Security Policies" tab and then Policy under Threat Prevention.

3. Click on "Updates" at the bottom and proceed with the IPS update. It can be done through client's internet connectivity or the Multi-Domain Managemet..

4. After the update is finished, push policy to the relevant Gateways and it should work now.

Re: Threat Policy Install failed

the_rock — Sat, 01 Apr 2023 20:49:16 GMT

I believe that was a;ready tried, but let @handiansudianto confirm.

Re: Threat Policy Install failed

handiansudianto — Mon, 03 Apr 2023 01:40:47 GMT

Hello, already try but still failed. Currently i open ticket to checkpoint support.

Re: Threat Policy Install failed

_Val_ — Mon, 03 Apr 2023 08:46:06 GMT

Please open a TAC case, if the problem is still there: https://help.checkpoint.com