Blade installed but inactive

[Josafat]

Hello everyone. I recently have a problem with the endpoints. As you can see in the image, the "Firewall & Access Zones" and "Application Control" blades are installed but not active. I have tried to repair the client, which works satisfactorily but it did not solve the problem.

[PhoneBoy]

No screenshot was included, so we cannot.
Also, need more information like client version and how it’s managed (Infinity Portal or on-premise and version). 

[Josafat]

The client version is 88.41.1002, the manage is infinity portal.

[PhoneBoy]

The firewall does require a driver to be loaded.
Has the client been rebooted since you've applied the relevant policy to it?

[the_rock]

I would possibly verify this with TAC via remote session.

Andy

[Tom_Hinoue]

I wonder if it's just a cosmetic issue on client side.
Does the issue occur in both Modern UI and the Legacy (old) client UI?

[CheckMatesAI]

This answer is provided by Infinity AI Copilot and should be confirmed by reviewing official documentation in Support Center.

To address the issue of the Firewall & Access Zones and Application Control blades being installed but inactive, even after attempting a client repair, you can follow these troubleshooting steps:

1. Check Services: Ensure that the necessary services for these blades are running. You can do this by examining their status via the Control Panel Services utility. If any services are not running, try to start them manually.

2. Policy Verification: Verify that the correct policies are applied to the endpoints. Sometimes, misconfigured policies can prevent blades from activating. Check the policy settings in the Check Point Management Console to ensure they are correctly configured.

3. Log Examination: Use the Log Viewer in the Endpoint Security Client UI to check for any logs related to the Firewall and Application Control blades. This can help identify if there are any specific rules or issues causing the blades to remain inactive.

4. Network Protection Alerts: Ensure that network protection alerts are configured correctly. This can be done in the "Policy" tab under "Client Settings" by editing the "Network Protection" action properties.

5. CPInfo Utility: Collect debug information using the CPInfo utility in Extended mode. This will provide more detailed logs that can be useful for further investigation.

6. Contact Support: If the above steps do not resolve the issue, consider contacting Check Point Support for further assistance. They may provide a hotfix or additional guidance specific to your environment.

For more detailed information, you can refer to the ATRG: Endpoint Security Firewall and Application Control Blade document.