Why the IPS blade prevent Checkpoint update.

[Sajith137433]

Hi Guys,

I observed, IPS blade prevented the dwonload as i attched in the screenshot.

Verion is R81.20 take 120.

Curl connectivity is okay now. 

I already added the rule also in network and application layer. 

Can u share the solution for this.

[Chris_Atkinson]

Could you please add the attachment, what was the offending protection listed ?

[Sajith137433]

Hi Chris,

Sorry. I attached the screenshot.

Can you confirm why the failed the update.

[Chris_Atkinson]

So this is just saying that IPS was unable to update not that IPS blocked an update.

If you've already reviewed the relevant SK articles for this error and the issue persists, please reach out to TAC to continue troubleshooting.

[the_rock]

As Chris asked, if you could please attach what you mentioned? There is nothing visible in the post.

[Sajith137433]

Hi Andy,

Sorry. I attached the screenshot.

Can you confirm why the failed the update.

[the_rock]

Is the IPS blade set to auto update? If so and it still fails, can you try update it manually from smart console? Never seen option Tim mentioned, but worth looking into.

[Sajith137433]

Hi Rock,

Has the option that mentioned by Tim under the Gobal Propoertis. 

The reason is without doing the mentioned process Tim, Sometimes, update is competed. Sometime not completed like this.

[Timothy_Hall]

If you are saying the IPS blade blocked its own updates, make sure no one has unchecked the checkbox below, which is set by default.  Doing so can cause the IPS blade to block its own updates, because the update file contains data that matches IPS signatures... and can itself be blocked by IPS.  Nice little Catch-22 that this checkbox helps avoid:

[Sajith137433]

Hi Tim,

As you mentioned, Is it ok to bypass only for Thret and IPS Upates under the Global Propoerties?

[Sajith137433]

Hi Tim,

Please confirm according to the below screenshot, now is it fine?

[the_rock]

It should be checked.

[Timothy_Hall]

Make sure it is checked.