Smartendpoint 81.10 AD computer groups not updating

[maxluc]

Hi everyone,

since some days we noticed that our AD security groups containing computer objects, are not updating anymore when a computer is added or removed.

We use AD Security Groups to link policy and deployment rules, so we're unable to move endpoints to manage single installations or FDE operations.

We tried moving groups, removing and adding them again in rules, and CPSTOP and START the SmartEndpoint appliance, but no updates.

The organization scanner seems to work, and if i create a new group, it will work for a while, but after removing some endpoint it will freeze and not update anymore.

The issue seems related to the internal db that imports the AD structure.

[PhoneBoy]

I suspect TAC will be required to investigate this: https://help.checkpoint.com