EPS Policy server - no sync

[GianniPapetti]

Hi there,

i'm trying to install a dedicated EPS Policy Server with 80.40 last updated solutions.

Everything seems to be fine in SmartConsole, but when looking at SmartEndpoint, it says "1 Policy Server out of sync".

After some investigation i found these logs entry in server-messages.log of dedicated EPS Policy Server:

[2021-02-14T15:04:11,988] INFO Connection Point State Machine - Retrieved file: sic://xxxxxxx:18193/cp/file/501/00000000-0000-0015-0000-000000000016 and saved to local path: /opt/CPuepm-R80.40/engine/webapps/CP/cache/PAT_DIFF/PAT_DIFF.0. File size: 2KB, download took 1s (FileDownloader)
[2021-02-14T15:04:11,989] ERROR Connection Point State Machine - Error performing sync with EPS (ConnectionPointStateMachine)
java.lang.NullPointerException: null
at com.checkpoint.uepm.api.blmconnector.PolicyAssignmentTableDiff.addPolicyAssignmentToPat(PolicyAssignmentTableDiff.java:508) ~[unity.jar:?]
at com.checkpoint.uepm.api.blmconnector.PolicyAssignmentTableDiff.handlePolicyAssignments(PolicyAssignmentTableDiff.java:446) ~[unity.jar:?]
at com.checkpoint.uepm.api.blmconnector.PolicyAssignmentTableDiff.updatePat(PolicyAssignmentTableDiff.java:308) ~[unity.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.file.PATSynchronizer.synchronizeDiff(PATSynchronizer.java:151) ~[connectionPoint.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.statemachine.ConnectionPointStateMachine.resolveSyncResponse(ConnectionPointStateMachine.java:788) ~[connectionPoint.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.statemachine.ConnectionPointStateMachine.access$1100(ConnectionPointStateMachine.java:47) ~[connectionPoint.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.statemachine.ConnectionPointStateMachine$Sync.execute(ConnectionPointStateMachine.java:501) [connectionPoint.jar:?]
at com.checkpoint.uepm.connectionpoint.blmconnector.networkbinding.statemachine.ConnectionPointStateMachine.run(ConnectionPointStateMachine.java:247) [connectionPoint.jar:?]
at java.lang.Thread.run(Thread.java:820) [?:2.9 (02-19-2020)]

Hope someone could point me to the right direction.

Best regards.

[PhoneBoy]

Probably need a TAC case to see what’s going on.

[GianniPapetti]

Hi,

fortunately EPPS is still in development and not in production, if needed i could do some more esotic actions 🙂

Best regards,

G.

[GianniPapetti]

Ok,

after some more investigation i downgraded security management console to take 78 instead of take 91 and re-installed external EPS Policy Server.

Everything works as expected. Maybe was something during SMC/EPS update.

Will try a new upgrade after backup/snapshot.

Regards,

Gianni.

[J_B]

Is your policy server at the same patch level as your management server? If they're different then I've seen issues before with them being out of sync.