R81.10 management server with JHF OG take 38 install policy stucks at 50%

[KostasGR]

Hello

On a LAB environment i am facing an issue with install policy.

R81.10 management server with JHF OG take 38 install policy stucks at 50% towards a Gateway r80.30 take 210.

With fw stat i can see that the policy is installed successfully.

Any ideas?

Kostas

[Tal_Paz-Fridman]

Did you try installing policy again? does it also happen?

[KostasGR]

Yes it still happens.

[Chris_Atkinson]

Does the lab also comprise other R81.x gateways or only the R80.30 one?

[KostasGR]

Only R80.30. After many install policy retries and rebooting the LAB SMS the issue was solved.

Any ideas for the root cause? 

[Chris_Atkinson]

What are the specs of the lab machines?

A reboot all but eliminates any theories I may have suggested prior without a detailed review of the logs.

[G_W_Albrecht]

You wrote that the issue was resolved - so every policy install is successfull now ? How long had the SMS been up ?

[the_rock]

You could check /var/log/messages files and see if there is anything there. I have same jumbo running on lab mgmt, though my gateways are R81.10, not R80.30

[KostasGR]

Hello again

The issue still persists.The policy stucks at 50% and with fw ctl zdebug drop on the gateway i can see the below.

@;418864;[cpu_3];[fw4_0];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_0];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_0];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_1];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_1];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_1];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_2];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_2];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_2];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_3];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_3];<0>Invalid license: VE license is required;
@;418864;[cpu_3];[fw4_3];<0>Invalid license: VE license is required;

Do you think is related?Any ideas how to solve it? The Gateway is a VM.

BR,
Kostas

[the_rock]

Hm...I saw below forum, but not so sure those can safely be ignored...

https://community.checkpoint.com/t5/Cloud-Network-Security/Invalid-license-VE-license-is-required/td...

Is license same on both gateways? Can you confirm?

Andy

[Chris_Atkinson]

What license type & resources are assigned to the Gateway VM?

[KostasGR]

Hello all

Issue was solved/explained. The cause of the policy failure was that management server had 2 OS ethernet interfaces  and on the smartconsole had defined only one interface on the MGMT object. After matching the MGMT server object with the OS ,issue  was solved.

Thank you all for your replies!!

[the_rock]

O wow, amazing update, thanks for sharing...thats my favorite part of this community, people always willing to share the solution after the issue is solved, always helps! Have a nice weekend.

Andy

[Tal_Paz-Fridman]

Thank you for the information.

I will move this to the relevant R&D owner so that we could improve the user experience in similar cases.