topic Re: Policy installation fails with "Error code 2000025" and sk177710 in General Topics

Policy installation fails with "Error code 2000025" and sk177710

D_Riddleberger — Tue, 23 Sep 2025 20:08:45 GMT

Determined that Policy installation fails with "Error code 2000025" and for sk177710 this also applies to R81.20.

sk177710 notes applies to versions R80.20 (EOS), R80.30 (EOS), R80.40 (EOS), R81 (EOS) and R81.10 but experienced this for R81.20 (see attached).

Mgmt Server R81.20 HF-111

Gateways R81.20 HF-105

Re: Policy installation fails with "Error code 2000025" and sk177710

Chris_Atkinson — Tue, 23 Sep 2025 23:21:48 GMT

Did you forget the attachment?

You can verify further with TAC or submit feedback on the SK if you feel it needs updating.

Re: Policy installation fails with "Error code 2000025" and sk177710

the_rock — Wed, 24 Sep 2025 00:03:33 GMT

I just read the sk and you are correct, does not mention R81.20, but what I find really odd is that it mentions the issue can be with the service used. I had never seen that be the case with error like one you got. If I were you, would double check SIC, communication is fine between gw and mgmt, routing, etc.

Andy

Re: Policy installation fails with "Error code 2000025" and sk177710

D_Riddleberger — Wed, 24 Sep 2025 01:25:38 GMT

Hey Chris, when I submitted the post, I added the attachment which showed the version was R81.20 along with the failed policy install error code 2000025. I'm re-attaching it here to our convo. Let me know if you can view it now.

Re: Policy installation fails with "Error code 2000025" and sk177710

ShemHunter — Fri, 13 Mar 2026 15:17:32 GMT

Hello!

I'm getting a similar error in the test lab:

Gateway: GW-A
Policy: Standard
Status: Failed
- Policy installation failed on gateway. If the problem persists, contact Check Point support (Error code: 1-2-2000025).

This error occurs when the policy specifies an object in the Services & Applications column + Drop with Blocked Message. This happens in the test lab, so I'm having trouble submitting a ticket to TAC. Currently, version 81.20 takes 120.

Re: Policy installation fails with "Error code 2000025" and sk177710

D_Riddleberger — Fri, 13 Mar 2026 17:36:56 GMT

ShemHunter

Sorry for now posting the detailed findings and resolution:

Determined the issue was with the "Check Point IPsec VPN services" application category:

Although this object was not being actively used in the policy, in its services was a group of services that an admin created/added to AppC Web Browsing services (in AppC and URLF blade settings).

After removing the group and adding the services individually, the policy is installing correctly.

Re: Policy installation fails with "Error code 2000025" and sk177710

ShemHunter — Fri, 13 Mar 2026 16:50:41 GMT

Thank you!

I'll check this out and report back, but I think it'll definitely help. I've already sent feedback to this sk, and I hope they'll reply soon.

Could you tell me what services are installed by default? I know I can add them in the managenet&services settings.

Re: Policy installation fails with "Error code 2000025" and sk177710

D_Riddleberger — Fri, 13 Mar 2026 17:50:31 GMT

ShemHunter

We figured this out by reviewing the Audit Logs.

In Smart Console under Applications/Categories for 'Check Point IPsec VPN Services'. The admin edited that category under Match Settings>Customize and if I recall then added add group of services. Which was allowed to save and publish but failed at policy installation time.