Update failed. Gateway can not access internet

[Ricardo_1806]

Hi everyone,

I'm currently facing an issue with IPS updates on a Check Point Gateway (VS) and would appreciate your guidance.

Context: Last Friday, the IPS blade was activated on the firewall. After enabling it, the IPS update status shows as Failed with the message: "Update failed. Gateway can not access internet", 

Connectivity from the VS (Virtual System) was verified and confirmed to have internet access. Despite this, the IPS status continues showing the warning.

I've already verified:

• Internet connectivity from the gateway / VS OK

• DNS resolution OK

• No apparent CPU or memory constraints

Any guidance or troubleshooting steps would be highly appreciated.

[_Val_]

Read sk170013

[emmap]

What Val said, and also make sure the CRL patch is installed.

[Lesley]

IPS needs to be enabled on VS0 and other Vs system that are going to use IPS. Internet access must work from VS itself and also VS0.

Best way to confirm it curl -vk https://updates.checkpoint.com on CLI, test in vs0 and other vs systems with ips.