CPD in Terminate status on Standalone

[Polina_1]

Hello.
We have a Standalone gateway on version R81.10.
The CPD process is not starting. After forcing it to start, it terminates after a few seconds. The required ports are not listening:

# netstat -an | grep 18192
# netstat -an | grep 18191

# cpstat os
Failed to establish session with AMON server at 127.0.0.1:18192

In SmartConsole we see the following error "Connection with <Security gateway name> is lost".
sk166495 has been checked. The HKLM_registry.data file contains correct values.

Also sk101484, sk116356, sk166495 were checked. Unfortunately, nothing brought positive results.
Please tell us how we can solve this problem.

[G_W_Albrecht]

Open a SR# with CP TAC ! You did tell nothing about the past of the GW at all... Usually a reinstall and Database backup import should resolve this.

[the_rock]

Did it ever work? When did you notice the issue? Does cprestart or reboot help at all?

what about below?

- Stop CPD with command
cpwd_admin stop -name CPD -path "$CPDIR/bin/cpd_admin" -command "cpd_admin stop"

- Start CPD without unlimited retries
cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd" -retry_limit u

[Polina_1]

Previously (about 2 weeks ago) we had a problem in the following:
- Check Point Security Management Server is during initialization

- CPM process was in status terminated.
- We could not connect to SmartConsole.
- High CPU utilization was observed.
- Logs showed messages about system dump:

BM Java[28826]: JVMDUMP032I JVM requested Java dump using '/var/log/dump/usermode/javacore.20240627.160050.28826.0003.txt' in response to an event
IBM Java[28826]: JVMDUMP032I JVM requested Snap dump using '/var/log/dump/usermode/Snap.20240627.160050.28826.0004.trc' in response to an event
IBM Java[32581]: JVMDUMP032I JVM requested System dump using '/var/log/dump/usermode/core.20240627.160538.32581.0001.dmp' in response to an event
Java[32581]: JVMDUMP012E Error in System dump: The core file created by child process with pid = 2106 was not found. Expected to find core file with name "/var/log/dump/usermode/core.2106"

We ran cprestart, reboot several times. After that the problem was solved. Since that time, we have not seen any system dump messages in the logs. 

However, after that we noticed that the CPD process is not started. 

We tried running cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd".  But it didn't give any positive result. Cprestart doesn't help either.
Policy installation fails with "Installation Failed. Reason TCP connectivity failed (port-18191)(IP=x.x.x.x.x)[error no. 10]."

[the_rock]

Makes sense that if api is not starting, smart console will never work, thats given. Just curious, did you ever open TAC case for this? I ask, because when it comes to standalone environment, having this sort of issue is pretty serious, since there is no separate gateway.

If you tried all those things and still not working, they may need to dig further into possible database issue.

Btw, when was the last time this worked? If you can web UI into the appliance, why not try upgrade to R81.20?

Andy

[Polina_1]

We don't opened a TAC case on this issue. It worked the last time in mid-June.
Can you tell me if we try to upgrade to R81.20, our problem might be resolved?

[the_rock]

I have no clue...I only mentioned it because it is recommended version and you are more likely to get better help from TAC if the issue is still there.

Andy

[the_rock]

R81.20 jumbo 70

 

[G_W_Albrecht]

i would think that the issue will remain if you upgrade. Better open SR# with TAC !

[the_rock]

Yea, thats true, hard to say...agree with TAC case, I would absolutely do that.

[Polina_1]

Thank you for your advice!

[the_rock]

Did you open TAC case?