Harmony Endpoint (87.30) hangs on deployment - always on "Waiting for software deployment" stage.

[Mitja-S3NEXT]

OS  : Windows 8.1 PRO (Update 1)

Endpoint : 87.30  (tryed also other version, but ended with the same result)

[Mitja-S3NEXT]

Added screenshot:

[ICSI]

I happened to me as well but in a Windows Server 2019.

Main problem was solved by deactivating.

• Microsoft Defender
• Disabling the Firewall (scary)
• Removing any other antivirus.

Your Windows version is pretty old so they might be some incompatibility issues. I would say try disabling stuff first before placing an SR.

[Mitja-S3NEXT]

Thank you ICSS, but it did NOT solve the problem.
Windows 8.1 Pro is still supported. This is not the issue.

[the_rock]

Does same happen if you try different computer?

Andy

[Mitja-S3NEXT]

No, on others computers in the company the deployment works normally.  (so it is not an network issue)

[the_rock]

So its 100% that computer thats the problem. You need to check further to confirm there is no other 3rd party software blocking this.

Andy

[Mitja-S3NEXT]

100% no other 3rd party software is blocking it. I have triple checked it.

[the_rock]

K, I dont have access to check myself, but logically speaking, I cant see anything else be the issue. If other computers work and you tried same harmony endpoint software, it cant be endpoint thats the issue, it has to be that specific computer.

I would go through programs under control panel one by one if you wanted to uninstall something to make sure there is nothing there left behind that could be the issue. Not saying this is the reason, but its possible there might be some files on the comp that could be causing this...just an idea.

Andy

[Mitja-S3NEXT]

Is there any way to check connectivity between the computer and the CheckPoint servers?

[RS_Daniel]

Yes, check sk116590

https://support.checkpoint.com/results/sk/sk116590

[Mitja-S3NEXT]

[ICSI]

Hi @Mitja-S3NEXT those akami & amazonaws sites, have you open those ports and IPs? 

[Mitja-S3NEXT]

Yes, nothing is blocked.

[the_rock]

Ok, I know this might be too much to ask for, but is there any way you could send us list of EVERY program listed in control panel on that comp? If so, would help us ensure 100% there is absolutely nothing that could interfere with this...if you can, please blur out any sensitive info.

Cheers,

Andy

[Mitja-S3NEXT]

No problem. Here is a complete list.

[the_rock]

I dont know every single program listed there, but here is one question I have...just wanted to make sure we are on the same page here. I see first in the list it says endpoint security...which to me indicates its actual harmony endpoint software, which would tell me it "thinks" its installed already. Are you able to click on it and uninstall it and try again or you had done that already?

[Mitja-S3NEXT]

The only difference between the other computers is the Windows 8.1 (udpate1) Professional OS, but I got an answer that it is still supported.

[the_rock]

Not sure if windows 8 is supported based on below:

https://support.checkpoint.com/results/sk/sk115192

You may want to verify with TAC. To check connectivity, just make sure you can do nslookup and ping to updates.checkpoint.com and cws.checkpoint.com

Andy

[ICSI]

As far as I remember when I had that problem it was about having another antivirus activated, including MS Defender. Have you disable Microsoft Defender? it could help. 

[Mitja-S3NEXT]

100% no defender, 100% no other antivirus software

[ICSI]

Open the Client, then MENU, aDVANCED, Collect. 

Client, Menu, Advanced, View Policies and see it is connected. is it in the same network as others? 

When you see the logs, what do you see? any error available?

[Mitja-S3NEXT]

Since the client is not deployed I can not go to any menus, or did you mean something on the portal.checkpoint.com?

[ICSI]

Great point! 

could you create a policy only for that computer and disable EVERYTHING and then AFTER (if you see the client deployed, start activating one thing at the time. It could help you to "figure out" where the problem stands. In my case, I did disable the firewall protection, USB port protection, etc. 

[the_rock]

That also makes sense to me @ICSI 

[the_rock]

But then, as you said before, disabling firewall blade, sort of defeats the purpose lol

[ICSI]

Tell me! I had to disable the MS Defender Firewall in a production environment!! horrible. But is part of the risk management! 😄 -

Basically, the idea is to test it and figure out the problem, but of course you want it enabled at the end. if you cannot make it work, better place a Service Request. (and keep your firewall on).

[the_rock]

Well, my friend, like most things in life...process of elimination ; - )

[Mitja-S3NEXT]

Are you sure? Please see this link. Regarding to this link Windows 8.1 Pro (Update 1) is supported.

Client Requirements (checkpoint.com)

[_Val_]

You are right. Please open a TAC request for your issue: https://support.checkpoint.com