Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Basilio_Alcant1
Contributor

CPUSE issue

Unable to install GA Take 66 on azure checkpoint firewall, i have access to the internet from the gateway but automatic check for updates is not brining the hotfix available under CPUSE and the manual import of the package is not working either. See screenshots attached.

 

This is a new cluster of firewalls i deployed recently using their azure marketplace template. One gateway got the take 66 update fine but the other one is not coming up for some strange reason.

 

Any help you can provide would be greatly appreciated. 

0 Kudos
9 Replies
Dmitry_Gorn
Employee
Employee

Can you share the contents of /etc/cloud-version.json from both members?

Azure images were recently updated to include Take 66 pre-installed (image build R81.10-335.1108 released on Sep 30):

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

 

Please run: cpinfo -y all 
And see if this take is already installed.

 

Thanks

0 Kudos
Basilio_Alcant1
Contributor

We used whatever template was available at the time of the deployment which was on 09/12. Even if there is a new image that has take 66 already,  we are expecting the jumbo take to be available for installation on existing firewalls with previous versions of the image , so I m hoping I can install the hotfix instead of having to redeploy the gateways. 

 

Below is the output of the file.  

 

    "release": "R81.10",

    "take": "335",

    "build": "985",

    "platform": "azure",

    "license": "byol",

    "deployment_method": "GW",

    "template_name": "ha",

    "template_version": "20220130",

    "template_type": "marketplace"

}

0 Kudos
Basilio_Alcant1
Contributor

cpinfo output:

This is Check Point CPinfo Build 914000227 for GAIA
[CPFC]
No hotfixes..
[IDA]
No hotfixes..
[MGMT]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[FW1]
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_GOT_TPCONF_AUTOUPDATE
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66

FW1 build number:
This is Check Point's software version R81.10 - Build 020
kernel: R81.10 - Build 021
[SecurePlatform]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[AutoUpdater]
No hotfixes..
[CPinfo]
No hotfixes..
[PPACK]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[DIAG]
No hotfixes..
[CVPN]
HOTFIX_R81_10_JUMBO_HF_MAIN Take: 66
[CPUpdates]
BUNDLE_CPSDC_AUTOUPDATE Take: 21
BUNDLE_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE Take: 18
BUNDLE_GOT_TPCONF_AUTOUPDATE Take: 104
BUNDLE_HCP_AUTOUPDATE Take: 52
BUNDLE_R81_10_JUMBO_HF_MAIN Take: 66
[hcp_wrapper]
HOTFIX_HCP_AUTOUPDATE
[CPDepInst]
No hotfixes..
[cpsdc_wrapper]
HOTFIX_CPSDC_AUTOUPDATE

0 Kudos
Chris_Atkinson
Employee Employee
Employee

JHF T66 is shown already here?

CCSM R77/R80/ELITE
0 Kudos
the_rock
Legend
Legend

I believe DA build is not the newest one...does it give option to update it if you check for new packages?

0 Kudos
Basilio_Alcant1
Contributor

Hi @the_rock when i click on check for updates it does check for updates fine but no packages come up on CPUSE for me to download/install, by the way this behaviour doesn't happen on member 1 but member 2.

 

0 Kudos
the_rock
Legend
Legend

Did you try failover? Reboot?

0 Kudos
Basilio_Alcant1
Contributor

yes i did same issue.

0 Kudos
Gregory_Azratz
Employee
Employee

Hi @Basilio_Alcant1 

can  you please share the CPUSE logs

To collect all the relevant logs run the command:

da_cli collect_logs

It creates a tgz file on the folder where it was run, including all required files to analyze the issue.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.