topic Re: Signature Error in General Topics

Signature Error

gourav_desawar — Sat, 06 Jan 2018 09:55:36 GMT

Hi,

I have one firewall gateway and it is running on checkpoint 75.30 application. i am trying to Update Anti-virus license on my gateway firewall but it shows an Error.

Error : Last signature update failed.

how can i resolve this error without upgrade my OS from 75.30 to above..

Pls help me on it.

Thanks,

Gourav Desawar

Re: Signature Error

Timothy_Hall — Sun, 07 Jan 2018 14:38:53 GMT

Release R75.30 hasn't been supported for quite some time. The issue you are experiencing is almost certainly due to the migration from SHA-1 to SHA-256 detailed here:

sk103839: Check Point update and online services migration to SHA-256 based certificates

There doesn't appear to be an official way to patch SHA-256 support into that release, would definitely be worth a call to Check Point TAC to see if they know a workaround for this.

--
My Book "Max Power: Check Point Firewall Performance Optimization"
Second Edition Coming Soon

Re: Signature Error

gourav_desawar — Mon, 08 Jan 2018 11:19:35 GMT

Hi ,

Thanks for your concern, Actually i want to know one thing that hardware addresses of firewall and management servers are different from which is mentioned in my checkpoint license file...

so is there any reason behind not update anti-virus Signatures through checkpoint online updates..?????

Thanks,

Gourav Desawar

Re: Signature Error

Timothy_Hall — Mon, 08 Jan 2018 13:01:40 GMT

If you had an IP address licensing issue, I think you'd know real quick as you wouldn't be able to push a new policy to the firewall and many features would not work correctly. I doubt that is inhibiting your signature updates, much more likely to be the SHA-1/SHA-256 issue.

In the SmartView Tracker filter try filtering for log entries with a Type of "Control" (grey wrench icon), you should be able to find the exact error message about the update failing which should help.

--
My Book "Max Power: Check Point Firewall Performance Optimization"
Second Edition Coming Very Soon

Re: Signature Error

PhoneBoy — Tue, 09 Jan 2018 17:20:20 GMT

There are hotfixes (obtainable from TAC) going back to R75.20 for the SHA-256 updates issue.

That said, you really should consider upgrading to a supported release.